./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstpcpy-alloca-1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstpcpy-alloca-1.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f22afdea3888c472e42c0b4bee511704d4ceb9c1e2d9f4db0ce5ffbd6de758f0 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-22 01:49:15,641 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-22 01:49:15,644 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-22 01:49:15,687 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-22 01:49:15,687 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-22 01:49:15,689 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-22 01:49:15,690 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-22 01:49:15,692 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-22 01:49:15,694 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-22 01:49:15,695 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-22 01:49:15,696 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-22 01:49:15,698 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-22 01:49:15,698 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-22 01:49:15,700 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-22 01:49:15,701 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-22 01:49:15,703 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-22 01:49:15,704 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-22 01:49:15,705 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-22 01:49:15,707 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-22 01:49:15,710 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-22 01:49:15,712 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-22 01:49:15,713 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-22 01:49:15,715 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-22 01:49:15,716 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-22 01:49:15,721 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-22 01:49:15,721 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-22 01:49:15,722 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-22 01:49:15,723 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-22 01:49:15,724 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-22 01:49:15,725 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-22 01:49:15,725 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-22 01:49:15,726 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-22 01:49:15,727 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-22 01:49:15,728 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-22 01:49:15,730 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-22 01:49:15,730 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-22 01:49:15,731 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-22 01:49:15,732 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-22 01:49:15,732 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-22 01:49:15,733 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-22 01:49:15,734 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-22 01:49:15,735 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-22 01:49:15,763 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-22 01:49:15,764 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-22 01:49:15,764 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-22 01:49:15,765 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-22 01:49:15,766 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-22 01:49:15,766 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-22 01:49:15,766 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-22 01:49:15,767 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-22 01:49:15,767 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-22 01:49:15,768 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-22 01:49:15,768 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-22 01:49:15,768 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-22 01:49:15,769 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-22 01:49:15,769 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-22 01:49:15,769 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-22 01:49:15,770 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-22 01:49:15,770 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-22 01:49:15,770 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-22 01:49:15,771 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-22 01:49:15,772 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-22 01:49:15,772 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-22 01:49:15,772 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-22 01:49:15,773 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-22 01:49:15,773 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-22 01:49:15,774 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-22 01:49:15,774 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-22 01:49:15,774 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-22 01:49:15,775 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-22 01:49:15,775 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-22 01:49:15,775 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-22 01:49:15,775 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-22 01:49:15,776 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-22 01:49:15,776 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-22 01:49:15,776 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-22 01:49:15,776 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-22 01:49:15,777 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:49:15,777 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-22 01:49:15,777 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-22 01:49:15,778 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-22 01:49:15,778 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-22 01:49:15,778 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-22 01:49:15,778 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-22 01:49:15,779 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f22afdea3888c472e42c0b4bee511704d4ceb9c1e2d9f4db0ce5ffbd6de758f0 [2022-11-22 01:49:16,028 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-22 01:49:16,059 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-22 01:49:16,063 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-22 01:49:16,065 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-22 01:49:16,065 INFO L275 PluginConnector]: CDTParser initialized [2022-11-22 01:49:16,067 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/../../sv-benchmarks/c/array-memsafety/openbsd_cstpcpy-alloca-1.i [2022-11-22 01:49:19,244 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-22 01:49:19,563 INFO L351 CDTParser]: Found 1 translation units. [2022-11-22 01:49:19,564 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/sv-benchmarks/c/array-memsafety/openbsd_cstpcpy-alloca-1.i [2022-11-22 01:49:19,579 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/data/7eff8a606/2de59742d2d84177a81bd86b3567b035/FLAGccb001388 [2022-11-22 01:49:19,594 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/data/7eff8a606/2de59742d2d84177a81bd86b3567b035 [2022-11-22 01:49:19,596 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-22 01:49:19,598 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-22 01:49:19,599 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-22 01:49:19,599 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-22 01:49:19,602 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-22 01:49:19,603 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:49:19" (1/1) ... [2022-11-22 01:49:19,604 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@21b65c62 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:19, skipping insertion in model container [2022-11-22 01:49:19,604 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 01:49:19" (1/1) ... [2022-11-22 01:49:19,612 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-22 01:49:19,645 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-22 01:49:19,944 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:49:19,958 INFO L203 MainTranslator]: Completed pre-run [2022-11-22 01:49:20,034 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-22 01:49:20,063 INFO L208 MainTranslator]: Completed translation [2022-11-22 01:49:20,064 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20 WrapperNode [2022-11-22 01:49:20,064 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-22 01:49:20,065 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-22 01:49:20,065 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-22 01:49:20,066 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-22 01:49:20,073 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,091 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,108 INFO L138 Inliner]: procedures = 117, calls = 13, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 64 [2022-11-22 01:49:20,108 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-22 01:49:20,109 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-22 01:49:20,109 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-22 01:49:20,109 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-22 01:49:20,118 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,119 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,121 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,122 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,127 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,131 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,132 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,133 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,136 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-22 01:49:20,136 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-22 01:49:20,137 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-22 01:49:20,137 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-22 01:49:20,138 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (1/1) ... [2022-11-22 01:49:20,144 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-22 01:49:20,159 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:20,172 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-22 01:49:20,193 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-22 01:49:20,243 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-22 01:49:20,243 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-22 01:49:20,244 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-22 01:49:20,244 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-22 01:49:20,244 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-22 01:49:20,244 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-22 01:49:20,405 INFO L235 CfgBuilder]: Building ICFG [2022-11-22 01:49:20,407 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-22 01:49:20,609 INFO L276 CfgBuilder]: Performing block encoding [2022-11-22 01:49:20,668 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-22 01:49:20,668 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-22 01:49:20,671 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:49:20 BoogieIcfgContainer [2022-11-22 01:49:20,671 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-22 01:49:20,677 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-22 01:49:20,677 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-22 01:49:20,681 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-22 01:49:20,681 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.11 01:49:19" (1/3) ... [2022-11-22 01:49:20,682 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e0d580f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:49:20, skipping insertion in model container [2022-11-22 01:49:20,682 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 01:49:20" (2/3) ... [2022-11-22 01:49:20,682 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e0d580f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.11 01:49:20, skipping insertion in model container [2022-11-22 01:49:20,682 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 01:49:20" (3/3) ... [2022-11-22 01:49:20,684 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstpcpy-alloca-1.i [2022-11-22 01:49:20,705 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-22 01:49:20,705 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 9 error locations. [2022-11-22 01:49:20,752 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-22 01:49:20,759 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6a51bdad, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-22 01:49:20,760 INFO L358 AbstractCegarLoop]: Starting to check reachability of 9 error locations. [2022-11-22 01:49:20,769 INFO L276 IsEmpty]: Start isEmpty. Operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:20,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-22 01:49:20,775 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:20,776 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-22 01:49:20,776 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:20,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:20,780 INFO L85 PathProgramCache]: Analyzing trace with hash 105340, now seen corresponding path program 1 times [2022-11-22 01:49:20,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:20,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616539978] [2022-11-22 01:49:20,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:20,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:20,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:20,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:20,971 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:20,972 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616539978] [2022-11-22 01:49:20,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616539978] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:20,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:20,973 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-22 01:49:20,975 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643488838] [2022-11-22 01:49:20,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:20,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:49:20,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:21,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:49:21,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:49:21,032 INFO L87 Difference]: Start difference. First operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:21,113 INFO L93 Difference]: Finished difference Result 21 states and 23 transitions. [2022-11-22 01:49:21,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:49:21,116 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-22 01:49:21,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:21,123 INFO L225 Difference]: With dead ends: 21 [2022-11-22 01:49:21,123 INFO L226 Difference]: Without dead ends: 19 [2022-11-22 01:49:21,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:49:21,129 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:21,130 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 20 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:21,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-22 01:49:21,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-22 01:49:21,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 10 states have (on average 2.0) internal successors, (20), 18 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2022-11-22 01:49:21,166 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 3 [2022-11-22 01:49:21,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:21,166 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2022-11-22 01:49:21,166 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,166 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2022-11-22 01:49:21,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:49:21,167 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:21,167 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:49:21,167 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-22 01:49:21,168 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:21,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:21,168 INFO L85 PathProgramCache]: Analyzing trace with hash 3267810, now seen corresponding path program 1 times [2022-11-22 01:49:21,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:21,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979868548] [2022-11-22 01:49:21,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:21,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:21,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:21,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:21,308 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:21,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979868548] [2022-11-22 01:49:21,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979868548] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:21,309 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:21,309 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:49:21,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1138083762] [2022-11-22 01:49:21,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:21,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-22 01:49:21,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:21,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-22 01:49:21,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:49:21,312 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:21,339 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-11-22 01:49:21,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-22 01:49:21,340 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:49:21,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:21,340 INFO L225 Difference]: With dead ends: 17 [2022-11-22 01:49:21,340 INFO L226 Difference]: Without dead ends: 17 [2022-11-22 01:49:21,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-22 01:49:21,342 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 13 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:21,343 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 6 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:49:21,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-11-22 01:49:21,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2022-11-22 01:49:21,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 10 states have (on average 1.8) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2022-11-22 01:49:21,346 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 4 [2022-11-22 01:49:21,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:21,347 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2022-11-22 01:49:21,347 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,347 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2022-11-22 01:49:21,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:49:21,348 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:21,348 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:49:21,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-22 01:49:21,348 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:21,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:21,349 INFO L85 PathProgramCache]: Analyzing trace with hash 3267811, now seen corresponding path program 1 times [2022-11-22 01:49:21,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:21,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [785709227] [2022-11-22 01:49:21,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:21,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:21,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:21,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:21,470 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:21,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [785709227] [2022-11-22 01:49:21,471 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [785709227] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:21,471 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:21,471 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:49:21,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557064029] [2022-11-22 01:49:21,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:21,472 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:49:21,472 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:21,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:49:21,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:49:21,473 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 4 states, 4 states have (on average 1.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:21,507 INFO L93 Difference]: Finished difference Result 20 states and 21 transitions. [2022-11-22 01:49:21,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:49:21,508 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:49:21,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:21,509 INFO L225 Difference]: With dead ends: 20 [2022-11-22 01:49:21,509 INFO L226 Difference]: Without dead ends: 20 [2022-11-22 01:49:21,509 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:49:21,511 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 20 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 16 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:21,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 16 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:49:21,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2022-11-22 01:49:21,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 18. [2022-11-22 01:49:21,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 11 states have (on average 1.7272727272727273) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-11-22 01:49:21,517 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 4 [2022-11-22 01:49:21,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:21,517 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-11-22 01:49:21,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:21,518 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-11-22 01:49:21,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-22 01:49:21,518 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:21,518 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-22 01:49:21,519 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-22 01:49:21,519 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:21,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:21,520 INFO L85 PathProgramCache]: Analyzing trace with hash 3266345, now seen corresponding path program 1 times [2022-11-22 01:49:21,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:21,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951970500] [2022-11-22 01:49:21,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:21,521 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:21,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:21,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:21,921 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:21,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951970500] [2022-11-22 01:49:21,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951970500] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:21,922 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:21,922 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:49:21,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2109121343] [2022-11-22 01:49:21,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:21,923 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:49:21,923 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:21,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:49:21,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:49:21,925 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:22,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:22,027 INFO L93 Difference]: Finished difference Result 19 states and 20 transitions. [2022-11-22 01:49:22,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-22 01:49:22,028 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-22 01:49:22,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:22,029 INFO L225 Difference]: With dead ends: 19 [2022-11-22 01:49:22,030 INFO L226 Difference]: Without dead ends: 19 [2022-11-22 01:49:22,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:49:22,041 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 20 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:22,042 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 17 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:22,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-22 01:49:22,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-22 01:49:22,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 12 states have (on average 1.6666666666666667) internal successors, (20), 18 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:22,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2022-11-22 01:49:22,051 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 4 [2022-11-22 01:49:22,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:22,051 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2022-11-22 01:49:22,052 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:22,054 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2022-11-22 01:49:22,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 01:49:22,055 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:22,055 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-22 01:49:22,055 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-22 01:49:22,056 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:22,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:22,057 INFO L85 PathProgramCache]: Analyzing trace with hash -1155966095, now seen corresponding path program 1 times [2022-11-22 01:49:22,057 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:22,058 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267352594] [2022-11-22 01:49:22,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:22,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:22,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:22,261 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:22,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:22,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267352594] [2022-11-22 01:49:22,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267352594] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:22,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1547922768] [2022-11-22 01:49:22,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:22,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:22,264 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:22,271 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:22,279 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-22 01:49:22,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:22,348 INFO L263 TraceCheckSpWp]: Trace formula consists of 66 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-22 01:49:22,353 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:22,482 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:22,483 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:22,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 19 [2022-11-22 01:49:22,672 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:22,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1547922768] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:22,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [717591870] [2022-11-22 01:49:22,697 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-22 01:49:22,698 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:22,703 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:22,711 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:22,715 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:22,865 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:22,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:22,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:23,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:23,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:23,163 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:23,796 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '234#(and (not (< |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~length2~0#1|)) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (not (<= (+ |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|))) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:23,796 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:23,797 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:23,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 13 [2022-11-22 01:49:23,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [988710884] [2022-11-22 01:49:23,797 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:23,797 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 01:49:23,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:23,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 01:49:23,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-11-22 01:49:23,799 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:23,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:23,984 INFO L93 Difference]: Finished difference Result 18 states and 19 transitions. [2022-11-22 01:49:23,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:49:23,987 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 01:49:23,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:23,988 INFO L225 Difference]: With dead ends: 18 [2022-11-22 01:49:23,988 INFO L226 Difference]: Without dead ends: 18 [2022-11-22 01:49:23,989 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=107, Invalid=355, Unknown=0, NotChecked=0, Total=462 [2022-11-22 01:49:23,989 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 78 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 85 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:23,990 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 17 Invalid, 85 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:23,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2022-11-22 01:49:23,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 18. [2022-11-22 01:49:23,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 12 states have (on average 1.5833333333333333) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:23,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-11-22 01:49:23,992 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 6 [2022-11-22 01:49:23,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:23,992 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-11-22 01:49:23,993 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:23,993 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-11-22 01:49:23,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-22 01:49:23,993 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:23,993 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-22 01:49:24,003 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:24,194 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:24,194 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:24,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:24,195 INFO L85 PathProgramCache]: Analyzing trace with hash -1155967561, now seen corresponding path program 1 times [2022-11-22 01:49:24,195 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:24,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [100431352] [2022-11-22 01:49:24,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:24,196 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:24,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:24,385 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:24,386 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:24,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [100431352] [2022-11-22 01:49:24,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [100431352] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:24,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1172164468] [2022-11-22 01:49:24,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:24,387 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:24,387 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:24,388 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:24,414 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-22 01:49:24,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:24,466 INFO L263 TraceCheckSpWp]: Trace formula consists of 68 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-22 01:49:24,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:24,536 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 01:49:24,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:49:24,686 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:24,687 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:24,884 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:24,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1172164468] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:24,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [24099234] [2022-11-22 01:49:24,887 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-22 01:49:24,887 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:24,887 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:24,888 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:24,888 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:24,940 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:24,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:25,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:25,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:25,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:25,132 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:25,525 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '325#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet10#1| 127) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet10#1|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (not (<= (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset| 1) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|))) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:25,525 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:25,525 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:25,525 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-22 01:49:25,526 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1480929970] [2022-11-22 01:49:25,526 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:25,526 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 01:49:25,526 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:25,527 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 01:49:25,527 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=69, Invalid=237, Unknown=0, NotChecked=0, Total=306 [2022-11-22 01:49:25,527 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:25,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:25,777 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-11-22 01:49:25,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:49:25,778 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-22 01:49:25,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:25,779 INFO L225 Difference]: With dead ends: 17 [2022-11-22 01:49:25,779 INFO L226 Difference]: Without dead ends: 17 [2022-11-22 01:49:25,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 80 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=126, Invalid=380, Unknown=0, NotChecked=0, Total=506 [2022-11-22 01:49:25,780 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 89 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 12 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:25,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 12 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:25,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-11-22 01:49:25,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 16. [2022-11-22 01:49:25,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 11 states have (on average 1.5454545454545454) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:25,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-11-22 01:49:25,783 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 6 [2022-11-22 01:49:25,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:25,783 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-11-22 01:49:25,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:25,784 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-11-22 01:49:25,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:49:25,784 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:25,784 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:25,800 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:25,991 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:25,992 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:25,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:25,992 INFO L85 PathProgramCache]: Analyzing trace with hash -1475209664, now seen corresponding path program 1 times [2022-11-22 01:49:25,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:25,992 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1418668961] [2022-11-22 01:49:25,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:25,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:26,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:26,034 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:26,035 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:26,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1418668961] [2022-11-22 01:49:26,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1418668961] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:26,035 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:26,036 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-22 01:49:26,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [333966779] [2022-11-22 01:49:26,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:26,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:49:26,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:26,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:49:26,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:49:26,037 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:26,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:26,063 INFO L93 Difference]: Finished difference Result 15 states and 16 transitions. [2022-11-22 01:49:26,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:49:26,064 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:49:26,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:26,064 INFO L225 Difference]: With dead ends: 15 [2022-11-22 01:49:26,065 INFO L226 Difference]: Without dead ends: 15 [2022-11-22 01:49:26,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:49:26,066 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 15 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:26,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 6 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:49:26,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2022-11-22 01:49:26,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2022-11-22 01:49:26,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 11 states have (on average 1.4545454545454546) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:26,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-22 01:49:26,073 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 7 [2022-11-22 01:49:26,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:26,074 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-22 01:49:26,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:26,074 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-22 01:49:26,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-22 01:49:26,075 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:26,075 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:26,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-22 01:49:26,075 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:26,076 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:26,076 INFO L85 PathProgramCache]: Analyzing trace with hash -1475209663, now seen corresponding path program 1 times [2022-11-22 01:49:26,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:26,076 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1780734464] [2022-11-22 01:49:26,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:26,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:26,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:26,349 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:26,349 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:26,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1780734464] [2022-11-22 01:49:26,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1780734464] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:26,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1899564637] [2022-11-22 01:49:26,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:26,351 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:26,351 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:26,352 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:26,378 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-22 01:49:26,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:26,432 INFO L263 TraceCheckSpWp]: Trace formula consists of 90 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-22 01:49:26,434 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:26,494 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:26,494 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:26,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2022-11-22 01:49:26,537 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:26,538 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1899564637] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:26,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1524665732] [2022-11-22 01:49:26,543 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-22 01:49:26,543 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:26,543 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:26,544 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:26,544 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:26,599 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:26,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:26,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:49:26,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:26,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:26,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:26,818 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:27,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1524665732] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:27,434 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:27,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5, 4, 4] total 13 [2022-11-22 01:49:27,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580283166] [2022-11-22 01:49:27,435 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:27,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-22 01:49:27,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:27,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-22 01:49:27,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2022-11-22 01:49:27,436 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 7 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:27,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:27,507 INFO L93 Difference]: Finished difference Result 19 states and 20 transitions. [2022-11-22 01:49:27,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-22 01:49:27,508 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-22 01:49:27,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:27,509 INFO L225 Difference]: With dead ends: 19 [2022-11-22 01:49:27,509 INFO L226 Difference]: Without dead ends: 19 [2022-11-22 01:49:27,509 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 10 SyntacticMatches, 2 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2022-11-22 01:49:27,510 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 17 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:27,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 11 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:27,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-22 01:49:27,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 16. [2022-11-22 01:49:27,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:27,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-11-22 01:49:27,512 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 7 [2022-11-22 01:49:27,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:27,513 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-11-22 01:49:27,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 1.1666666666666667) internal successors, (7), 6 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:27,513 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-11-22 01:49:27,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 01:49:27,513 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:27,513 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:27,525 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:27,714 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:27,714 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:27,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:27,715 INFO L85 PathProgramCache]: Analyzing trace with hash 1513140689, now seen corresponding path program 1 times [2022-11-22 01:49:27,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:27,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1195681127] [2022-11-22 01:49:27,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:27,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:27,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:27,860 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:49:27,861 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:27,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1195681127] [2022-11-22 01:49:27,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1195681127] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:27,861 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:27,861 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-22 01:49:27,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743825945] [2022-11-22 01:49:27,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:27,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-22 01:49:27,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:27,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-22 01:49:27,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-22 01:49:27,864 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:27,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:27,894 INFO L93 Difference]: Finished difference Result 15 states and 16 transitions. [2022-11-22 01:49:27,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:49:27,896 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 01:49:27,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:27,897 INFO L225 Difference]: With dead ends: 15 [2022-11-22 01:49:27,897 INFO L226 Difference]: Without dead ends: 15 [2022-11-22 01:49:27,898 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-22 01:49:27,900 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 12 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:27,900 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 7 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:49:27,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2022-11-22 01:49:27,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2022-11-22 01:49:27,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 12 states have (on average 1.3333333333333333) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:27,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-22 01:49:27,904 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 8 [2022-11-22 01:49:27,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:27,905 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-22 01:49:27,905 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:27,905 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-22 01:49:27,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-22 01:49:27,905 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:27,906 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:27,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-22 01:49:27,906 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:27,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:27,907 INFO L85 PathProgramCache]: Analyzing trace with hash 1513140690, now seen corresponding path program 1 times [2022-11-22 01:49:27,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:27,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1092641857] [2022-11-22 01:49:27,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:27,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:27,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:28,124 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:28,124 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:28,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1092641857] [2022-11-22 01:49:28,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1092641857] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:28,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1121985789] [2022-11-22 01:49:28,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:28,125 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:28,125 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:28,127 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:28,154 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-22 01:49:28,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:28,204 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 43 conjunts are in the unsatisfiable core [2022-11-22 01:49:28,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:28,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:49:28,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:28,764 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:28,764 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:29,008 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:29,037 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:29,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1121985789] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:29,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1756509013] [2022-11-22 01:49:29,040 INFO L159 IcfgInterpreter]: Started Sifa with 8 locations of interest [2022-11-22 01:49:29,040 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:29,041 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:29,041 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:29,041 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:29,080 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:29,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:29,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:29,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:29,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:29,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:29,288 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:30,647 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '593#(and (not (< |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~length2~0#1|)) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (= (select (select |#memory_int| |ULTIMATE.start_main_~nondetString~0#1.base|) (+ (- 1) |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|)) 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.base| |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= (+ |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|)) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 (+ |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|)) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| |ULTIMATE.start_cstpcpy_~from#1.offset|) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| |ULTIMATE.start_main_~nondetArea~0#1.offset|) (= |ULTIMATE.start_cstpcpy_~to#1.base| |ULTIMATE.start_cstpcpy_#in~to#1.base|) (= |ULTIMATE.start_cstpcpy_#in~from#1.base| |ULTIMATE.start_main_~nondetString~0#1.base|) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_cstpcpy_~from#1.base| |ULTIMATE.start_cstpcpy_#in~from#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:30,647 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:30,647 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:30,647 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 7, 7] total 19 [2022-11-22 01:49:30,647 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092070838] [2022-11-22 01:49:30,648 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:30,648 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-22 01:49:30,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:30,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-22 01:49:30,649 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=618, Unknown=0, NotChecked=0, Total=756 [2022-11-22 01:49:30,649 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 21 states, 20 states have (on average 1.2) internal successors, (24), 20 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:31,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:31,371 INFO L93 Difference]: Finished difference Result 38 states and 40 transitions. [2022-11-22 01:49:31,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:49:31,372 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 1.2) internal successors, (24), 20 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-22 01:49:31,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:31,372 INFO L225 Difference]: With dead ends: 38 [2022-11-22 01:49:31,372 INFO L226 Difference]: Without dead ends: 38 [2022-11-22 01:49:31,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=275, Invalid=1057, Unknown=0, NotChecked=0, Total=1332 [2022-11-22 01:49:31,374 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 142 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 22 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:31,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 22 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:49:31,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-22 01:49:31,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 16. [2022-11-22 01:49:31,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 13 states have (on average 1.3076923076923077) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:31,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-11-22 01:49:31,377 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 8 [2022-11-22 01:49:31,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:31,377 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-11-22 01:49:31,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 1.2) internal successors, (24), 20 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:31,378 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-11-22 01:49:31,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-22 01:49:31,378 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:31,379 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:31,391 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:31,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-22 01:49:31,585 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:31,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:31,586 INFO L85 PathProgramCache]: Analyzing trace with hash -1865709960, now seen corresponding path program 1 times [2022-11-22 01:49:31,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:31,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497587683] [2022-11-22 01:49:31,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:31,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:31,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:31,826 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:31,826 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:31,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497587683] [2022-11-22 01:49:31,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497587683] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:31,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [101013653] [2022-11-22 01:49:31,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:31,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:31,828 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:31,831 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:31,850 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-22 01:49:31,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:31,913 INFO L263 TraceCheckSpWp]: Trace formula consists of 113 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-22 01:49:31,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:32,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:32,058 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:32,061 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:49:32,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:49:32,068 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:32,069 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:32,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:49:32,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 01:49:32,281 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:32,281 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [101013653] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:32,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [109766234] [2022-11-22 01:49:32,284 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:49:32,284 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:32,284 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:32,285 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:32,285 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:32,338 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:32,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:32,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:49:32,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:32,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:32,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:32,623 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:32,658 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:49:32,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:49:32,770 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:32,771 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:32,778 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:32,780 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:32,817 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:49:32,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:49:32,898 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:49:32,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:49:32,997 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:34,681 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '743#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:34,682 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:34,682 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:34,682 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 17 [2022-11-22 01:49:34,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1590689159] [2022-11-22 01:49:34,682 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:34,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-22 01:49:34,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:34,683 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-22 01:49:34,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=525, Unknown=0, NotChecked=0, Total=600 [2022-11-22 01:49:34,683 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 17 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 17 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:34,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:34,981 INFO L93 Difference]: Finished difference Result 26 states and 27 transitions. [2022-11-22 01:49:34,982 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 01:49:34,983 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 17 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-22 01:49:34,983 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:34,983 INFO L225 Difference]: With dead ends: 26 [2022-11-22 01:49:34,983 INFO L226 Difference]: Without dead ends: 26 [2022-11-22 01:49:34,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 176 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=141, Invalid=789, Unknown=0, NotChecked=0, Total=930 [2022-11-22 01:49:34,985 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 57 mSDsluCounter, 29 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:34,985 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 33 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:34,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-22 01:49:34,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 22. [2022-11-22 01:49:34,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 19 states have (on average 1.263157894736842) internal successors, (24), 21 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:34,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 24 transitions. [2022-11-22 01:49:34,988 INFO L78 Accepts]: Start accepts. Automaton has 22 states and 24 transitions. Word has length 10 [2022-11-22 01:49:34,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:34,988 INFO L495 AbstractCegarLoop]: Abstraction has 22 states and 24 transitions. [2022-11-22 01:49:34,988 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 17 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:34,988 INFO L276 IsEmpty]: Start isEmpty. Operand 22 states and 24 transitions. [2022-11-22 01:49:34,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-22 01:49:34,989 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:34,989 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:34,999 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:35,194 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-22 01:49:35,195 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:35,195 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:35,195 INFO L85 PathProgramCache]: Analyzing trace with hash -2002450371, now seen corresponding path program 1 times [2022-11-22 01:49:35,195 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:35,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [765696257] [2022-11-22 01:49:35,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:35,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:35,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:35,308 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:49:35,308 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:35,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [765696257] [2022-11-22 01:49:35,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [765696257] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-22 01:49:35,309 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-22 01:49:35,309 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-22 01:49:35,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565518576] [2022-11-22 01:49:35,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-22 01:49:35,310 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-22 01:49:35,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:35,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-22 01:49:35,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:49:35,311 INFO L87 Difference]: Start difference. First operand 22 states and 24 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:35,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:35,329 INFO L93 Difference]: Finished difference Result 21 states and 23 transitions. [2022-11-22 01:49:35,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-22 01:49:35,329 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-22 01:49:35,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:35,330 INFO L225 Difference]: With dead ends: 21 [2022-11-22 01:49:35,330 INFO L226 Difference]: Without dead ends: 15 [2022-11-22 01:49:35,330 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-22 01:49:35,337 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 3 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:35,337 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 8 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-22 01:49:35,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2022-11-22 01:49:35,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2022-11-22 01:49:35,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:35,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-22 01:49:35,347 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 11 [2022-11-22 01:49:35,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:35,347 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-22 01:49:35,347 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:35,348 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-22 01:49:35,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-22 01:49:35,349 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:35,349 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:35,349 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-22 01:49:35,349 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:35,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:35,350 INFO L85 PathProgramCache]: Analyzing trace with hash -346987898, now seen corresponding path program 2 times [2022-11-22 01:49:35,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:35,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [571888522] [2022-11-22 01:49:35,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:35,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:35,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:35,610 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:35,610 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:35,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [571888522] [2022-11-22 01:49:35,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [571888522] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:35,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1801210361] [2022-11-22 01:49:35,611 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:49:35,611 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:35,611 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:35,615 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:35,638 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-22 01:49:35,729 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-22 01:49:35,730 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:49:35,731 INFO L263 TraceCheckSpWp]: Trace formula consists of 113 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-22 01:49:35,735 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:35,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:35,817 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:49:35,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-22 01:49:35,906 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:49:35,907 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:36,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-22 01:49:36,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-22 01:49:36,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-22 01:49:36,059 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:49:36,059 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1801210361] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:36,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [258997705] [2022-11-22 01:49:36,063 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:49:36,063 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:36,063 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:36,064 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:36,064 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:36,098 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:36,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:36,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:49:36,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:36,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:36,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:36,330 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:36,355 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:49:36,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:49:36,428 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:36,432 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:36,433 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:36,435 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:36,486 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:49:36,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:49:36,559 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:49:36,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:49:36,645 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:38,212 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '931#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:38,212 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:38,212 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:38,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 5] total 13 [2022-11-22 01:49:38,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1258867907] [2022-11-22 01:49:38,213 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:38,213 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-22 01:49:38,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:38,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-22 01:49:38,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=389, Unknown=0, NotChecked=0, Total=462 [2022-11-22 01:49:38,214 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 14 states, 13 states have (on average 2.0) internal successors, (26), 14 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:38,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:38,455 INFO L93 Difference]: Finished difference Result 21 states and 22 transitions. [2022-11-22 01:49:38,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 01:49:38,455 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 2.0) internal successors, (26), 14 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-22 01:49:38,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:38,456 INFO L225 Difference]: With dead ends: 21 [2022-11-22 01:49:38,456 INFO L226 Difference]: Without dead ends: 21 [2022-11-22 01:49:38,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 19 SyntacticMatches, 1 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=121, Invalid=581, Unknown=0, NotChecked=0, Total=702 [2022-11-22 01:49:38,458 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 53 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 95 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:38,458 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 1 Invalid, 95 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:38,459 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2022-11-22 01:49:38,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 17. [2022-11-22 01:49:38,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 15 states have (on average 1.2) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:38,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2022-11-22 01:49:38,461 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 12 [2022-11-22 01:49:38,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:38,462 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2022-11-22 01:49:38,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 2.0) internal successors, (26), 14 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:38,462 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2022-11-22 01:49:38,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-22 01:49:38,463 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:38,463 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-22 01:49:38,485 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:38,671 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:38,671 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:38,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:38,672 INFO L85 PathProgramCache]: Analyzing trace with hash 2128277037, now seen corresponding path program 1 times [2022-11-22 01:49:38,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:38,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [482415530] [2022-11-22 01:49:38,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:38,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:38,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:39,062 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:39,062 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:39,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [482415530] [2022-11-22 01:49:39,062 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [482415530] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:39,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1608514754] [2022-11-22 01:49:39,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:39,063 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:39,063 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:39,067 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:39,086 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-22 01:49:39,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:39,151 INFO L263 TraceCheckSpWp]: Trace formula consists of 132 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-22 01:49:39,153 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:39,225 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:39,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:49:39,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:49:39,408 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:39,408 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:39,632 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:39,663 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:39,663 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1608514754] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:39,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2492184] [2022-11-22 01:49:39,665 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:49:39,665 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:39,666 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:39,666 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:39,666 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:39,694 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:39,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:39,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:39,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:39,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:39,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:39,947 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:39,980 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:49:39,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:49:40,071 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:40,072 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:40,074 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:40,076 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:40,109 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:49:40,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:49:40,179 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:49:40,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:49:40,256 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:42,003 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1081#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:42,003 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:42,003 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:42,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 20 [2022-11-22 01:49:42,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414658862] [2022-11-22 01:49:42,004 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:42,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-22 01:49:42,005 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:42,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-22 01:49:42,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=751, Unknown=0, NotChecked=0, Total=870 [2022-11-22 01:49:42,006 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 22 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 21 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:42,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:42,488 INFO L93 Difference]: Finished difference Result 19 states and 20 transitions. [2022-11-22 01:49:42,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-22 01:49:42,488 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 21 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-22 01:49:42,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:42,489 INFO L225 Difference]: With dead ends: 19 [2022-11-22 01:49:42,489 INFO L226 Difference]: Without dead ends: 19 [2022-11-22 01:49:42,490 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 222 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=208, Invalid=1052, Unknown=0, NotChecked=0, Total=1260 [2022-11-22 01:49:42,490 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 91 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:42,490 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 0 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:42,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-22 01:49:42,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 18. [2022-11-22 01:49:42,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 16 states have (on average 1.1875) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:42,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-11-22 01:49:42,493 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 13 [2022-11-22 01:49:42,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:42,493 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-11-22 01:49:42,493 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 21 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:42,494 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-11-22 01:49:42,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-22 01:49:42,494 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:42,494 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2022-11-22 01:49:42,502 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-11-22 01:49:42,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-22 01:49:42,703 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:42,703 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:42,703 INFO L85 PathProgramCache]: Analyzing trace with hash 869799955, now seen corresponding path program 3 times [2022-11-22 01:49:42,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:42,704 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388421876] [2022-11-22 01:49:42,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:42,704 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:42,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:43,309 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:43,310 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:43,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388421876] [2022-11-22 01:49:43,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388421876] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:43,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1737165073] [2022-11-22 01:49:43,311 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:49:43,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:43,311 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:43,312 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:43,346 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-22 01:49:43,423 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:49:43,423 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:49:43,425 INFO L263 TraceCheckSpWp]: Trace formula consists of 149 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-22 01:49:43,427 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:43,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:49:43,654 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:43,664 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-22 01:49:43,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-22 01:49:43,764 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:43,766 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:49:43,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:49:43,771 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:43,771 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:43,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 174 treesize of output 162 [2022-11-22 01:49:43,906 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:49:43,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 163 treesize of output 147 [2022-11-22 01:49:44,144 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:44,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1737165073] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:44,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [821627862] [2022-11-22 01:49:44,146 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:49:44,146 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:44,146 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:44,147 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:44,147 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:44,178 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:44,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:44,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:49:44,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:44,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:44,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:44,405 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:44,427 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:49:44,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:49:44,501 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:44,502 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:44,504 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:44,507 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:44,534 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:49:44,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:49:44,599 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:49:44,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:49:44,682 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:46,379 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1250#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:46,380 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:46,382 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:46,382 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 28 [2022-11-22 01:49:46,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1019796094] [2022-11-22 01:49:46,382 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:46,383 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 01:49:46,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:46,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 01:49:46,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=1142, Unknown=0, NotChecked=0, Total=1260 [2022-11-22 01:49:46,384 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 28 states, 28 states have (on average 1.2857142857142858) internal successors, (36), 28 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:47,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:47,153 INFO L93 Difference]: Finished difference Result 28 states and 29 transitions. [2022-11-22 01:49:47,153 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-22 01:49:47,153 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 1.2857142857142858) internal successors, (36), 28 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-22 01:49:47,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:47,154 INFO L225 Difference]: With dead ends: 28 [2022-11-22 01:49:47,154 INFO L226 Difference]: Without dead ends: 21 [2022-11-22 01:49:47,154 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 552 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=271, Invalid=1985, Unknown=0, NotChecked=0, Total=2256 [2022-11-22 01:49:47,155 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 40 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 226 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 226 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:47,155 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 45 Invalid, 244 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 226 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:49:47,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2022-11-22 01:49:47,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 20. [2022-11-22 01:49:47,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 18 states have (on average 1.1666666666666667) internal successors, (21), 19 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:47,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 21 transitions. [2022-11-22 01:49:47,157 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 21 transitions. Word has length 15 [2022-11-22 01:49:47,157 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:47,157 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 21 transitions. [2022-11-22 01:49:47,157 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 1.2857142857142858) internal successors, (36), 28 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:47,157 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 21 transitions. [2022-11-22 01:49:47,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-22 01:49:47,158 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:47,158 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1] [2022-11-22 01:49:47,167 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:47,358 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-22 01:49:47,358 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:47,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:47,359 INFO L85 PathProgramCache]: Analyzing trace with hash 645895365, now seen corresponding path program 4 times [2022-11-22 01:49:47,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:47,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012289858] [2022-11-22 01:49:47,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:47,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:47,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:47,631 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:47,632 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:47,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012289858] [2022-11-22 01:49:47,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012289858] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:47,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [789777899] [2022-11-22 01:49:47,632 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:49:47,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:47,632 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:47,635 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:47,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-22 01:49:47,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:47,737 INFO L263 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-22 01:49:47,738 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:47,846 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:47,846 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:47,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 01:49:48,027 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:48,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [789777899] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:48,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1421242979] [2022-11-22 01:49:48,029 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:49:48,029 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:48,029 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:48,029 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:48,030 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:48,065 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:48,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:48,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:49:48,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:48,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:48,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:48,275 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:48,305 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:49:48,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:49:48,377 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:48,381 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:48,382 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:48,384 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:48,419 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:49:48,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:49:48,491 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:49:48,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:49:48,565 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:50,195 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1446#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:50,195 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:50,195 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:50,195 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 19 [2022-11-22 01:49:50,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [809593271] [2022-11-22 01:49:50,195 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:50,196 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-22 01:49:50,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:50,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-22 01:49:50,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=649, Unknown=0, NotChecked=0, Total=756 [2022-11-22 01:49:50,197 INFO L87 Difference]: Start difference. First operand 20 states and 21 transitions. Second operand has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:50,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:50,453 INFO L93 Difference]: Finished difference Result 26 states and 27 transitions. [2022-11-22 01:49:50,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-22 01:49:50,453 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-22 01:49:50,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:50,454 INFO L225 Difference]: With dead ends: 26 [2022-11-22 01:49:50,454 INFO L226 Difference]: Without dead ends: 26 [2022-11-22 01:49:50,454 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 28 SyntacticMatches, 3 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 284 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=177, Invalid=879, Unknown=0, NotChecked=0, Total=1056 [2022-11-22 01:49:50,455 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 116 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:50,455 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 1 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-22 01:49:50,456 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-22 01:49:50,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 22. [2022-11-22 01:49:50,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 20 states have (on average 1.15) internal successors, (23), 21 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:50,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 23 transitions. [2022-11-22 01:49:50,457 INFO L78 Accepts]: Start accepts. Automaton has 22 states and 23 transitions. Word has length 17 [2022-11-22 01:49:50,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:50,458 INFO L495 AbstractCegarLoop]: Abstraction has 22 states and 23 transitions. [2022-11-22 01:49:50,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:50,458 INFO L276 IsEmpty]: Start isEmpty. Operand 22 states and 23 transitions. [2022-11-22 01:49:50,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-22 01:49:50,458 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:50,458 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 1, 1, 1, 1, 1] [2022-11-22 01:49:50,466 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:50,659 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-22 01:49:50,659 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:50,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:50,660 INFO L85 PathProgramCache]: Analyzing trace with hash -1452080178, now seen corresponding path program 2 times [2022-11-22 01:49:50,660 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:50,660 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1096058747] [2022-11-22 01:49:50,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:50,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:50,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:49:51,125 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:49:51,125 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:49:51,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1096058747] [2022-11-22 01:49:51,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1096058747] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:49:51,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [157668569] [2022-11-22 01:49:51,126 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:49:51,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:51,126 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:49:51,127 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:49:51,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-22 01:49:51,217 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-22 01:49:51,217 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:49:51,220 INFO L263 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 66 conjunts are in the unsatisfiable core [2022-11-22 01:49:51,225 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:49:51,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:49:51,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:49:51,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 01:49:51,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 26 [2022-11-22 01:49:51,803 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:51,822 INFO L321 Elim1Store]: treesize reduction 4, result has 85.2 percent of original size [2022-11-22 01:49:51,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 30 treesize of output 33 [2022-11-22 01:49:52,215 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:49:52,215 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:49:52,697 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:49:52,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 37 treesize of output 36 [2022-11-22 01:49:52,721 INFO L321 Elim1Store]: treesize reduction 17, result has 54.1 percent of original size [2022-11-22 01:49:52,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 31 [2022-11-22 01:49:52,729 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:52,757 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:49:52,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 44 treesize of output 35 [2022-11-22 01:49:52,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:49:53,045 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:53,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:49:53,106 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 01:49:53,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [157668569] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:49:53,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2488329] [2022-11-22 01:49:53,109 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:49:53,109 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:49:53,110 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:49:53,110 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:49:53,110 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:49:53,140 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:53,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:49:53,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:49:53,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:53,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:53,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:49:53,359 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:53,382 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:49:53,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:49:53,452 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:53,456 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:53,458 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:49:53,459 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:53,460 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:49:53,493 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:49:53,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:49:53,595 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:49:53,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:49:53,699 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:49:55,655 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1644#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:49:55,655 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:49:55,656 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:49:55,656 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 10] total 28 [2022-11-22 01:49:55,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097263740] [2022-11-22 01:49:55,656 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:49:55,656 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-22 01:49:55,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:49:55,657 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-22 01:49:55,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1240, Unknown=0, NotChecked=0, Total=1406 [2022-11-22 01:49:55,658 INFO L87 Difference]: Start difference. First operand 22 states and 23 transitions. Second operand has 30 states, 29 states have (on average 1.5862068965517242) internal successors, (46), 29 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:59,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:49:59,498 INFO L93 Difference]: Finished difference Result 35 states and 36 transitions. [2022-11-22 01:49:59,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-22 01:49:59,499 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 1.5862068965517242) internal successors, (46), 29 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-22 01:49:59,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:49:59,500 INFO L225 Difference]: With dead ends: 35 [2022-11-22 01:49:59,500 INFO L226 Difference]: Without dead ends: 35 [2022-11-22 01:49:59,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 77 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 502 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=500, Invalid=2362, Unknown=0, NotChecked=0, Total=2862 [2022-11-22 01:49:59,501 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 245 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 246 mSolverCounterSat, 33 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 281 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 246 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:49:59,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [245 Valid, 0 Invalid, 281 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 246 Invalid, 2 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:49:59,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-22 01:49:59,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 32. [2022-11-22 01:49:59,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 30 states have (on average 1.2) internal successors, (36), 31 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:59,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 36 transitions. [2022-11-22 01:49:59,505 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 36 transitions. Word has length 18 [2022-11-22 01:49:59,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:49:59,505 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 36 transitions. [2022-11-22 01:49:59,505 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 1.5862068965517242) internal successors, (46), 29 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:49:59,505 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 36 transitions. [2022-11-22 01:49:59,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-22 01:49:59,506 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:49:59,506 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2022-11-22 01:49:59,511 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-22 01:49:59,710 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:49:59,711 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:49:59,711 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:49:59,711 INFO L85 PathProgramCache]: Analyzing trace with hash 415320436, now seen corresponding path program 5 times [2022-11-22 01:49:59,711 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:49:59,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [681230826] [2022-11-22 01:49:59,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:49:59,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:49:59,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:50:00,245 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 3 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:00,246 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:50:00,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [681230826] [2022-11-22 01:50:00,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [681230826] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:50:00,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [288048665] [2022-11-22 01:50:00,246 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:50:00,246 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:00,246 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:50:00,248 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:50:00,255 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-22 01:50:00,389 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-22 01:50:00,389 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:50:00,392 INFO L263 TraceCheckSpWp]: Trace formula consists of 185 conjuncts, 56 conjunts are in the unsatisfiable core [2022-11-22 01:50:00,396 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:50:00,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:50:00,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:50:00,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:50:00,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:50:00,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:50:00,657 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 3 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:00,657 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:50:00,686 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_350 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_350) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 01:50:00,752 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:00,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:50:00,762 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:00,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:50:00,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:50:00,966 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 3 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 4 not checked. [2022-11-22 01:50:00,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [288048665] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:50:00,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [515898789] [2022-11-22 01:50:00,968 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:50:00,968 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:50:00,969 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:50:00,969 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:50:00,969 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:50:01,006 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:01,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:50:01,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:50:01,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:01,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:01,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:01,214 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:01,244 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:50:01,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:50:01,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:01,328 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:01,329 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:01,330 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:01,360 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:50:01,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:50:01,454 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:50:01,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:50:01,533 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:50:03,228 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1892#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:50:03,228 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:50:03,228 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:50:03,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 27 [2022-11-22 01:50:03,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1459175432] [2022-11-22 01:50:03,228 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:50:03,229 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-22 01:50:03,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:50:03,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-22 01:50:03,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=1006, Unknown=8, NotChecked=64, Total=1190 [2022-11-22 01:50:03,230 INFO L87 Difference]: Start difference. First operand 32 states and 36 transitions. Second operand has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:03,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:50:03,765 INFO L93 Difference]: Finished difference Result 45 states and 49 transitions. [2022-11-22 01:50:03,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-22 01:50:03,766 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-22 01:50:03,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:50:03,771 INFO L225 Difference]: With dead ends: 45 [2022-11-22 01:50:03,771 INFO L226 Difference]: Without dead ends: 35 [2022-11-22 01:50:03,772 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 399 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=200, Invalid=1516, Unknown=10, NotChecked=80, Total=1806 [2022-11-22 01:50:03,773 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 34 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 10 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 19 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:50:03,773 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 45 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 283 Invalid, 4 Unknown, 19 Unchecked, 0.2s Time] [2022-11-22 01:50:03,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-22 01:50:03,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 34. [2022-11-22 01:50:03,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 32 states have (on average 1.1875) internal successors, (38), 33 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:03,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 38 transitions. [2022-11-22 01:50:03,777 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 38 transitions. Word has length 20 [2022-11-22 01:50:03,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:50:03,777 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 38 transitions. [2022-11-22 01:50:03,777 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:03,777 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 38 transitions. [2022-11-22 01:50:03,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-22 01:50:03,778 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:50:03,778 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 1, 1, 1, 1, 1] [2022-11-22 01:50:03,799 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-11-22 01:50:03,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-22 01:50:03,996 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:50:03,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:50:03,997 INFO L85 PathProgramCache]: Analyzing trace with hash 2133191682, now seen corresponding path program 6 times [2022-11-22 01:50:03,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:50:03,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330306918] [2022-11-22 01:50:03,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:50:03,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:50:04,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:50:04,362 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 6 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:04,362 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:50:04,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330306918] [2022-11-22 01:50:04,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330306918] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:50:04,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1326844753] [2022-11-22 01:50:04,362 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:50:04,363 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:04,363 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:50:04,364 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:50:04,394 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-22 01:50:04,491 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:50:04,491 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:50:04,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 198 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-22 01:50:04,494 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:50:04,511 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:50:04,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:50:04,664 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 12 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:04,664 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:50:04,974 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 12 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:04,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1326844753] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:50:04,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [908937127] [2022-11-22 01:50:04,975 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:50:04,975 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:50:04,976 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:50:04,976 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:50:04,976 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:50:05,012 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:05,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:50:05,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:50:05,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:05,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:05,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:05,229 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:05,253 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:50:05,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:50:05,344 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:05,349 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:05,350 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:05,352 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:05,383 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:50:05,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:50:05,451 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:50:05,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:50:05,539 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:50:07,244 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2149#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:50:07,244 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:50:07,244 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:50:07,244 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 27 [2022-11-22 01:50:07,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246047094] [2022-11-22 01:50:07,244 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:50:07,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 01:50:07,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:50:07,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 01:50:07,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=175, Invalid=1085, Unknown=0, NotChecked=0, Total=1260 [2022-11-22 01:50:07,246 INFO L87 Difference]: Start difference. First operand 34 states and 38 transitions. Second operand has 28 states, 27 states have (on average 2.111111111111111) internal successors, (57), 28 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:07,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:50:07,602 INFO L93 Difference]: Finished difference Result 35 states and 38 transitions. [2022-11-22 01:50:07,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-22 01:50:07,603 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 2.111111111111111) internal successors, (57), 28 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-22 01:50:07,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:50:07,603 INFO L225 Difference]: With dead ends: 35 [2022-11-22 01:50:07,603 INFO L226 Difference]: Without dead ends: 35 [2022-11-22 01:50:07,604 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 474 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=298, Invalid=1424, Unknown=0, NotChecked=0, Total=1722 [2022-11-22 01:50:07,605 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 130 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-22 01:50:07,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 1 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-22 01:50:07,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-22 01:50:07,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 34. [2022-11-22 01:50:07,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 32 states have (on average 1.15625) internal successors, (37), 33 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:07,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 37 transitions. [2022-11-22 01:50:07,607 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 37 transitions. Word has length 22 [2022-11-22 01:50:07,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:50:07,608 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 37 transitions. [2022-11-22 01:50:07,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 2.111111111111111) internal successors, (57), 28 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:07,608 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 37 transitions. [2022-11-22 01:50:07,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-22 01:50:07,609 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:50:07,609 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 1, 1, 1, 1, 1] [2022-11-22 01:50:07,615 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-22 01:50:07,809 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:07,809 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:50:07,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:50:07,810 INFO L85 PathProgramCache]: Analyzing trace with hash 1577274647, now seen corresponding path program 7 times [2022-11-22 01:50:07,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:50:07,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872259267] [2022-11-22 01:50:07,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:50:07,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:50:07,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:50:08,578 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:08,579 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:50:08,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872259267] [2022-11-22 01:50:08,579 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872259267] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:50:08,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2121715336] [2022-11-22 01:50:08,579 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:50:08,579 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:08,580 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:50:08,583 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:50:08,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-22 01:50:08,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:50:08,723 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-22 01:50:08,726 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:50:08,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:50:08,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:09,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:50:09,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:50:09,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:50:09,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:50:09,150 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:09,150 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:50:09,164 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_448 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_448) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)))) is different from false [2022-11-22 01:50:09,307 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:09,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:50:09,315 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:09,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:50:09,500 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 6 not checked. [2022-11-22 01:50:09,500 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2121715336] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:50:09,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1294748783] [2022-11-22 01:50:09,502 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:50:09,503 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:50:09,503 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:50:09,503 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:50:09,503 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:50:09,536 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:09,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:50:09,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:50:09,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:09,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:09,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:09,798 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:09,827 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:50:09,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:50:09,890 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:09,893 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:09,895 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:09,899 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:09,930 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:50:09,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:50:10,020 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:50:10,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:50:10,105 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:50:11,872 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2410#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:50:11,873 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:50:11,873 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:50:11,873 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 28 [2022-11-22 01:50:11,873 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1407125127] [2022-11-22 01:50:11,873 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:50:11,873 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-22 01:50:11,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:50:11,874 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-22 01:50:11,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=106, Invalid=1066, Unknown=22, NotChecked=66, Total=1260 [2022-11-22 01:50:11,874 INFO L87 Difference]: Start difference. First operand 34 states and 37 transitions. Second operand has 28 states, 28 states have (on average 1.8928571428571428) internal successors, (53), 28 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:12,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:50:12,602 INFO L93 Difference]: Finished difference Result 50 states and 53 transitions. [2022-11-22 01:50:12,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-22 01:50:12,603 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 1.8928571428571428) internal successors, (53), 28 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-22 01:50:12,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:50:12,603 INFO L225 Difference]: With dead ends: 50 [2022-11-22 01:50:12,604 INFO L226 Difference]: Without dead ends: 37 [2022-11-22 01:50:12,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 53 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 419 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=199, Invalid=1849, Unknown=26, NotChecked=88, Total=2162 [2022-11-22 01:50:12,605 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 42 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 430 mSolverCounterSat, 10 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 430 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 27 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:50:12,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 45 Invalid, 468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 430 Invalid, 1 Unknown, 27 Unchecked, 0.3s Time] [2022-11-22 01:50:12,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-22 01:50:12,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-11-22 01:50:12,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 34 states have (on average 1.1470588235294117) internal successors, (39), 35 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:12,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 39 transitions. [2022-11-22 01:50:12,609 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 39 transitions. Word has length 25 [2022-11-22 01:50:12,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:50:12,609 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 39 transitions. [2022-11-22 01:50:12,610 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 1.8928571428571428) internal successors, (53), 28 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:12,610 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 39 transitions. [2022-11-22 01:50:12,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-22 01:50:12,610 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:50:12,611 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 1, 1, 1, 1, 1] [2022-11-22 01:50:12,616 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-22 01:50:12,815 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:12,815 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:50:12,815 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:50:12,815 INFO L85 PathProgramCache]: Analyzing trace with hash -1182526647, now seen corresponding path program 8 times [2022-11-22 01:50:12,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:50:12,816 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448777396] [2022-11-22 01:50:12,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:50:12,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:50:12,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:50:13,292 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 12 proven. 35 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:13,292 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:50:13,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448777396] [2022-11-22 01:50:13,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448777396] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:50:13,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1137808933] [2022-11-22 01:50:13,293 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:50:13,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:13,293 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:50:13,295 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:50:13,314 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-22 01:50:13,463 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-22 01:50:13,463 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:50:13,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-22 01:50:13,471 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:50:13,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:50:13,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:50:13,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:50:14,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 23 [2022-11-22 01:50:14,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 31 [2022-11-22 01:50:14,380 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:14,384 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:14,408 INFO L321 Elim1Store]: treesize reduction 8, result has 72.4 percent of original size [2022-11-22 01:50:14,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 37 treesize of output 35 [2022-11-22 01:50:14,517 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 7 proven. 34 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:50:14,517 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:50:15,450 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:15,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 70 treesize of output 48 [2022-11-22 01:50:15,470 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:15,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 87 treesize of output 86 [2022-11-22 01:50:15,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:50:15,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:50:15,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:50:15,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-22 01:50:16,210 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 1 proven. 40 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-22 01:50:16,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1137808933] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:50:16,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [336386215] [2022-11-22 01:50:16,212 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:50:16,212 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:50:16,213 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:50:16,213 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:50:16,213 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:50:16,266 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:16,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:50:16,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:50:16,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:16,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:16,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:50:16,462 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:16,489 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:50:16,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:50:16,560 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:16,563 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:16,565 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:16,566 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:16,568 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:16,602 INFO L321 Elim1Store]: treesize reduction 99, result has 15.4 percent of original size [2022-11-22 01:50:16,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 48 treesize of output 52 [2022-11-22 01:50:16,681 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:50:16,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:50:16,757 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:50:18,924 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2728#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:50:18,924 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:50:18,924 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:50:18,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 16, 18] total 44 [2022-11-22 01:50:18,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141075981] [2022-11-22 01:50:18,925 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:50:18,925 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-22 01:50:18,925 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:50:18,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-22 01:50:18,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=2504, Unknown=17, NotChecked=0, Total=2756 [2022-11-22 01:50:18,926 INFO L87 Difference]: Start difference. First operand 36 states and 39 transitions. Second operand has 45 states, 44 states have (on average 1.6590909090909092) internal successors, (73), 45 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:22,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:50:22,883 INFO L93 Difference]: Finished difference Result 42 states and 43 transitions. [2022-11-22 01:50:22,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 01:50:22,884 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 1.6590909090909092) internal successors, (73), 45 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-22 01:50:22,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:50:22,885 INFO L225 Difference]: With dead ends: 42 [2022-11-22 01:50:22,885 INFO L226 Difference]: Without dead ends: 42 [2022-11-22 01:50:22,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1153 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=917, Invalid=5383, Unknown=20, NotChecked=0, Total=6320 [2022-11-22 01:50:22,888 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 243 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 561 mSolverCounterSat, 55 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 243 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 626 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 561 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:50:22,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [243 Valid, 1 Invalid, 626 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 561 Invalid, 10 Unknown, 0 Unchecked, 0.6s Time] [2022-11-22 01:50:22,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2022-11-22 01:50:22,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 38. [2022-11-22 01:50:22,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 36 states have (on average 1.0833333333333333) internal successors, (39), 37 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:22,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 39 transitions. [2022-11-22 01:50:22,892 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 39 transitions. Word has length 27 [2022-11-22 01:50:22,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:50:22,893 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 39 transitions. [2022-11-22 01:50:22,893 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 1.6590909090909092) internal successors, (73), 45 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:50:22,894 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 39 transitions. [2022-11-22 01:50:22,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-22 01:50:22,894 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:50:22,894 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 5, 5, 1, 1, 1, 1, 1] [2022-11-22 01:50:22,903 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-11-22 01:50:23,101 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-11-22 01:50:23,101 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:50:23,101 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:50:23,101 INFO L85 PathProgramCache]: Analyzing trace with hash -94422, now seen corresponding path program 3 times [2022-11-22 01:50:23,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:50:23,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574496469] [2022-11-22 01:50:23,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:50:23,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:50:23,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:50:23,914 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 41 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:50:23,915 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:50:23,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574496469] [2022-11-22 01:50:23,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574496469] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:50:23,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [158283370] [2022-11-22 01:50:23,915 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:50:23,915 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:50:23,915 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:50:23,916 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:50:23,920 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-22 01:50:24,165 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:50:24,165 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:50:24,168 INFO L263 TraceCheckSpWp]: Trace formula consists of 286 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-22 01:50:24,176 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:50:24,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:50:24,560 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:24,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:50:24,655 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:24,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:50:24,754 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:24,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:50:24,864 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:50:24,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:50:24,931 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:50:24,933 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:50:24,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:50:24,978 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 25 proven. 55 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:50:24,978 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:50:25,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12770 treesize of output 12674 [2022-11-22 01:54:02,249 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 25 proven. 55 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 01:54:02,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [158283370] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:02,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1137342960] [2022-11-22 01:54:02,251 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:02,251 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:02,252 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:02,252 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:02,252 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:02,279 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:02,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:02,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:02,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:02,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:02,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:02,470 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:02,493 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:02,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:02,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:02,555 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:02,556 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:02,557 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:02,592 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:54:02,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:54:02,652 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:02,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:02,699 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:04,728 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3116#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:04,728 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:04,728 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:04,728 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 16, 20] total 48 [2022-11-22 01:54:04,728 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1611728178] [2022-11-22 01:54:04,728 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:04,729 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-22 01:54:04,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:04,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-22 01:54:04,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=2912, Unknown=0, NotChecked=0, Total=3080 [2022-11-22 01:54:04,731 INFO L87 Difference]: Start difference. First operand 38 states and 39 transitions. Second operand has 48 states, 48 states have (on average 1.8958333333333333) internal successors, (91), 48 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:06,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:06,781 INFO L93 Difference]: Finished difference Result 57 states and 58 transitions. [2022-11-22 01:54:06,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-22 01:54:06,782 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 1.8958333333333333) internal successors, (91), 48 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-22 01:54:06,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:06,782 INFO L225 Difference]: With dead ends: 57 [2022-11-22 01:54:06,783 INFO L226 Difference]: Without dead ends: 41 [2022-11-22 01:54:06,784 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1110 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=380, Invalid=5022, Unknown=0, NotChecked=0, Total=5402 [2022-11-22 01:54:06,785 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 79 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 834 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 863 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 834 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:06,785 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 45 Invalid, 863 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 834 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-22 01:54:06,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2022-11-22 01:54:06,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 40. [2022-11-22 01:54:06,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 38 states have (on average 1.0789473684210527) internal successors, (41), 39 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:06,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 41 transitions. [2022-11-22 01:54:06,792 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 41 transitions. Word has length 34 [2022-11-22 01:54:06,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:06,792 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 41 transitions. [2022-11-22 01:54:06,793 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 1.8958333333333333) internal successors, (91), 48 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:06,793 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 41 transitions. [2022-11-22 01:54:06,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-22 01:54:06,793 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:06,794 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2022-11-22 01:54:06,803 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-22 01:54:06,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-11-22 01:54:06,999 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:06,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:06,999 INFO L85 PathProgramCache]: Analyzing trace with hash 408199480, now seen corresponding path program 4 times [2022-11-22 01:54:06,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:06,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1417162447] [2022-11-22 01:54:06,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:07,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:07,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:07,770 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 41 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:07,770 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:07,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1417162447] [2022-11-22 01:54:07,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1417162447] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:07,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1640565921] [2022-11-22 01:54:07,770 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:54:07,770 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:07,770 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:07,775 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:07,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-22 01:54:07,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:07,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-22 01:54:07,927 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:07,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:08,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:08,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:54:08,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:54:08,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:54:08,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:54:08,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:54:08,763 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 01:54:08,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:54:08,802 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 12 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:08,802 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:08,890 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_643 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_643) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 01:54:08,897 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_643 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_643) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:54:09,186 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:09,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:54:09,193 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:09,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:54:09,419 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 12 proven. 58 refuted. 0 times theorem prover too weak. 0 trivial. 23 not checked. [2022-11-22 01:54:09,419 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1640565921] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:09,419 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1315386071] [2022-11-22 01:54:09,421 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:09,421 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:09,421 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:09,421 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:09,422 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:09,449 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:09,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:09,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:09,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:09,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:09,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:09,643 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:09,667 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:09,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:09,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:09,718 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:09,719 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:09,721 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:09,757 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:54:09,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:54:09,815 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:09,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:09,867 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:11,899 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3511#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:11,899 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:11,899 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:11,899 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 44 [2022-11-22 01:54:11,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [771650362] [2022-11-22 01:54:11,900 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:11,900 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-22 01:54:11,900 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:11,900 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-22 01:54:11,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=147, Invalid=2276, Unknown=35, NotChecked=194, Total=2652 [2022-11-22 01:54:11,901 INFO L87 Difference]: Start difference. First operand 40 states and 41 transitions. Second operand has 44 states, 44 states have (on average 2.0454545454545454) internal successors, (90), 44 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:14,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:14,270 INFO L93 Difference]: Finished difference Result 62 states and 63 transitions. [2022-11-22 01:54:14,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-22 01:54:14,271 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.0454545454545454) internal successors, (90), 44 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-22 01:54:14,271 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:14,271 INFO L225 Difference]: With dead ends: 62 [2022-11-22 01:54:14,272 INFO L226 Difference]: Without dead ends: 43 [2022-11-22 01:54:14,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 73 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 2 IntricatePredicates, 2 DeprecatedPredicates, 928 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=361, Invalid=4723, Unknown=36, NotChecked=282, Total=5402 [2022-11-22 01:54:14,274 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 58 mSDsluCounter, 42 mSDsCounter, 0 mSdLazyCounter, 968 mSolverCounterSat, 26 mSolverCounterUnsat, 40 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 1104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 968 IncrementalHoareTripleChecker+Invalid, 40 IncrementalHoareTripleChecker+Unknown, 70 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:14,274 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 45 Invalid, 1104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 968 Invalid, 40 Unknown, 70 Unchecked, 0.8s Time] [2022-11-22 01:54:14,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-22 01:54:14,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 42. [2022-11-22 01:54:14,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 40 states have (on average 1.075) internal successors, (43), 41 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:14,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 43 transitions. [2022-11-22 01:54:14,277 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 43 transitions. Word has length 36 [2022-11-22 01:54:14,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:14,277 INFO L495 AbstractCegarLoop]: Abstraction has 42 states and 43 transitions. [2022-11-22 01:54:14,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.0454545454545454) internal successors, (90), 44 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:14,278 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 43 transitions. [2022-11-22 01:54:14,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-22 01:54:14,279 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:14,279 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 1, 1, 1, 1, 1] [2022-11-22 01:54:14,291 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:14,487 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:14,487 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:14,487 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:14,487 INFO L85 PathProgramCache]: Analyzing trace with hash 1936615366, now seen corresponding path program 5 times [2022-11-22 01:54:14,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:14,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120138641] [2022-11-22 01:54:14,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:14,487 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:14,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:15,446 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 25 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:15,446 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:15,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120138641] [2022-11-22 01:54:15,446 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120138641] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:15,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [119520570] [2022-11-22 01:54:15,446 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:54:15,446 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:15,447 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:15,451 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:15,465 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-22 01:54:15,759 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-22 01:54:15,760 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:54:15,764 INFO L263 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 120 conjunts are in the unsatisfiable core [2022-11-22 01:54:15,770 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:15,836 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-22 01:54:15,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 01:54:15,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:16,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:54:16,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:16,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:17,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 23 [2022-11-22 01:54:17,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 31 [2022-11-22 01:54:17,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 39 [2022-11-22 01:54:17,914 INFO L321 Elim1Store]: treesize reduction 12, result has 63.6 percent of original size [2022-11-22 01:54:17,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 7 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 41 treesize of output 39 [2022-11-22 01:54:18,194 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 12 proven. 82 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-22 01:54:18,194 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:19,950 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:19,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 60 [2022-11-22 01:54:19,971 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:19,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 112 treesize of output 113 [2022-11-22 01:54:19,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:54:19,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:54:20,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:54:20,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:54:21,522 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:21,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:21,642 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 16 proven. 86 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:54:21,643 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [119520570] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:21,643 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [402677220] [2022-11-22 01:54:21,644 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:21,644 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:21,644 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:21,645 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:21,645 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:21,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:21,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:21,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:21,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:21,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:21,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:21,853 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:21,884 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:21,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:21,945 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:21,945 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:21,948 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:21,949 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:21,985 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:54:21,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:54:22,048 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:22,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:22,117 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:24,476 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3953#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:24,476 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:24,476 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:24,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 25] total 61 [2022-11-22 01:54:24,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [777480893] [2022-11-22 01:54:24,477 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:24,477 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-22 01:54:24,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:24,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-22 01:54:24,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=453, Invalid=4512, Unknown=5, NotChecked=0, Total=4970 [2022-11-22 01:54:24,480 INFO L87 Difference]: Start difference. First operand 42 states and 43 transitions. Second operand has 63 states, 62 states have (on average 1.7258064516129032) internal successors, (107), 62 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:32,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:32,107 INFO L93 Difference]: Finished difference Result 56 states and 57 transitions. [2022-11-22 01:54:32,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-22 01:54:32,107 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 1.7258064516129032) internal successors, (107), 62 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-22 01:54:32,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:32,108 INFO L225 Difference]: With dead ends: 56 [2022-11-22 01:54:32,108 INFO L226 Difference]: Without dead ends: 56 [2022-11-22 01:54:32,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2346 ImplicationChecksByTransitivity, 13.1s TimeCoverageRelationStatistics Valid=1739, Invalid=9593, Unknown=10, NotChecked=0, Total=11342 [2022-11-22 01:54:32,111 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 439 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 923 mSolverCounterSat, 107 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1035 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 923 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:32,111 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 0 Invalid, 1035 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 923 Invalid, 5 Unknown, 0 Unchecked, 1.1s Time] [2022-11-22 01:54:32,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-22 01:54:32,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 52. [2022-11-22 01:54:32,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 50 states have (on average 1.12) internal successors, (56), 51 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:32,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 56 transitions. [2022-11-22 01:54:32,124 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 56 transitions. Word has length 38 [2022-11-22 01:54:32,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:32,125 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 56 transitions. [2022-11-22 01:54:32,125 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 1.7258064516129032) internal successors, (107), 62 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:32,126 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 56 transitions. [2022-11-22 01:54:32,126 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-22 01:54:32,131 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:32,131 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2022-11-22 01:54:32,139 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:32,335 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-22 01:54:32,335 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:32,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:32,335 INFO L85 PathProgramCache]: Analyzing trace with hash 1366527852, now seen corresponding path program 9 times [2022-11-22 01:54:32,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:32,335 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1361299006] [2022-11-22 01:54:32,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:32,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:32,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:33,415 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:33,416 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:33,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1361299006] [2022-11-22 01:54:33,416 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1361299006] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:33,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [769849689] [2022-11-22 01:54:33,416 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:54:33,416 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:33,416 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:33,417 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:33,420 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-22 01:54:33,709 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:54:33,709 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:54:33,712 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 90 conjunts are in the unsatisfiable core [2022-11-22 01:54:33,715 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:33,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:33,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:33,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:54:34,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:54:34,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:54:34,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:54:34,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:54:34,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-22 01:54:34,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:54:34,262 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:34,262 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:34,298 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_800 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_800) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 01:54:34,361 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_800 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_800) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 01:54:34,379 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_800 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_800) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)))) is different from false [2022-11-22 01:54:34,444 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_800 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_800) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-22 01:54:34,456 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:34,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:54:34,467 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:34,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:54:34,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:54:34,897 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 7 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 51 not checked. [2022-11-22 01:54:34,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [769849689] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:34,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1645758604] [2022-11-22 01:54:34,898 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:34,898 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:34,899 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:34,899 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:34,899 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:34,926 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:34,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:34,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:35,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:35,118 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:35,143 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:35,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:35,204 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:35,206 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:35,208 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:35,210 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:35,245 INFO L321 Elim1Store]: treesize reduction 99, result has 15.4 percent of original size [2022-11-22 01:54:35,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 48 treesize of output 52 [2022-11-22 01:54:35,313 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:35,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:35,372 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:37,248 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4422#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:37,248 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:37,248 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:37,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 21] total 47 [2022-11-22 01:54:37,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [139092648] [2022-11-22 01:54:37,249 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:37,249 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-22 01:54:37,249 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:37,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-22 01:54:37,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=163, Invalid=2385, Unknown=18, NotChecked=404, Total=2970 [2022-11-22 01:54:37,250 INFO L87 Difference]: Start difference. First operand 52 states and 56 transitions. Second operand has 47 states, 47 states have (on average 2.0425531914893615) internal successors, (96), 47 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:38,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:38,743 INFO L93 Difference]: Finished difference Result 77 states and 81 transitions. [2022-11-22 01:54:38,743 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-22 01:54:38,743 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.0425531914893615) internal successors, (96), 47 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-22 01:54:38,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:38,744 INFO L225 Difference]: With dead ends: 77 [2022-11-22 01:54:38,744 INFO L226 Difference]: Without dead ends: 55 [2022-11-22 01:54:38,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 89 SyntacticMatches, 2 SemanticMatches, 69 ConstructedPredicates, 4 IntricatePredicates, 1 DeprecatedPredicates, 910 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=325, Invalid=4093, Unknown=20, NotChecked=532, Total=4970 [2022-11-22 01:54:38,745 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 48 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 1059 mSolverCounterSat, 13 mSolverCounterUnsat, 32 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 1266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 1059 IncrementalHoareTripleChecker+Invalid, 32 IncrementalHoareTripleChecker+Unknown, 162 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:38,745 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 81 Invalid, 1266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 1059 Invalid, 32 Unknown, 162 Unchecked, 0.7s Time] [2022-11-22 01:54:38,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-22 01:54:38,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 54. [2022-11-22 01:54:38,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 52 states have (on average 1.1153846153846154) internal successors, (58), 53 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:38,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 58 transitions. [2022-11-22 01:54:38,748 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 58 transitions. Word has length 40 [2022-11-22 01:54:38,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:38,749 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 58 transitions. [2022-11-22 01:54:38,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.0425531914893615) internal successors, (96), 47 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:38,749 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 58 transitions. [2022-11-22 01:54:38,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-22 01:54:38,750 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:38,750 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 1, 1, 1, 1, 1] [2022-11-22 01:54:38,759 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:38,956 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-22 01:54:38,956 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:38,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:38,956 INFO L85 PathProgramCache]: Analyzing trace with hash 1712021242, now seen corresponding path program 10 times [2022-11-22 01:54:38,956 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:38,956 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1473352521] [2022-11-22 01:54:38,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:38,957 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:38,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:39,588 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 42 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:39,589 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:39,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1473352521] [2022-11-22 01:54:39,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1473352521] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:39,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1564074469] [2022-11-22 01:54:39,589 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:54:39,589 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:39,589 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:39,590 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:39,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-22 01:54:39,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:39,742 INFO L263 TraceCheckSpWp]: Trace formula consists of 342 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-22 01:54:39,744 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:40,029 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 56 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:40,029 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:40,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-22 01:54:40,498 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 56 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:40,499 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1564074469] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:40,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1068632965] [2022-11-22 01:54:40,500 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:40,500 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:40,500 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:40,501 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:40,501 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:40,528 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:40,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:40,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:40,692 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:40,723 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:40,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:40,783 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:40,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:40,798 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:40,799 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:40,834 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:54:40,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:54:40,898 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:40,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:40,964 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:42,642 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4879#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:42,642 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:42,642 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:42,642 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 39 [2022-11-22 01:54:42,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1401370462] [2022-11-22 01:54:42,642 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:42,643 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-22 01:54:42,643 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:42,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-22 01:54:42,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=262, Invalid=1994, Unknown=0, NotChecked=0, Total=2256 [2022-11-22 01:54:42,644 INFO L87 Difference]: Start difference. First operand 54 states and 58 transitions. Second operand has 40 states, 39 states have (on average 2.282051282051282) internal successors, (89), 40 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:43,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:43,242 INFO L93 Difference]: Finished difference Result 55 states and 58 transitions. [2022-11-22 01:54:43,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-22 01:54:43,244 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 39 states have (on average 2.282051282051282) internal successors, (89), 40 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-22 01:54:43,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:43,245 INFO L225 Difference]: With dead ends: 55 [2022-11-22 01:54:43,245 INFO L226 Difference]: Without dead ends: 55 [2022-11-22 01:54:43,245 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 152 GetRequests, 88 SyntacticMatches, 8 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1129 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=527, Invalid=2779, Unknown=0, NotChecked=0, Total=3306 [2022-11-22 01:54:43,246 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 210 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 644 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:43,246 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 1 Invalid, 644 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-22 01:54:43,247 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-22 01:54:43,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 54. [2022-11-22 01:54:43,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 52 states have (on average 1.0961538461538463) internal successors, (57), 53 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:43,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 57 transitions. [2022-11-22 01:54:43,249 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 57 transitions. Word has length 42 [2022-11-22 01:54:43,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:43,249 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 57 transitions. [2022-11-22 01:54:43,250 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 39 states have (on average 2.282051282051282) internal successors, (89), 40 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:43,250 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 57 transitions. [2022-11-22 01:54:43,250 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-22 01:54:43,250 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:43,250 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2022-11-22 01:54:43,256 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:43,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-22 01:54:43,455 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:43,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:43,455 INFO L85 PathProgramCache]: Analyzing trace with hash 88168223, now seen corresponding path program 11 times [2022-11-22 01:54:43,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:43,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1839243418] [2022-11-22 01:54:43,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:43,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:43,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:44,707 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 8 proven. 148 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:44,707 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:44,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1839243418] [2022-11-22 01:54:44,708 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1839243418] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:44,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1933399950] [2022-11-22 01:54:44,708 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:54:44,708 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:44,708 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:44,719 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:44,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-22 01:54:45,154 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-11-22 01:54:45,154 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:54:45,158 INFO L263 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 123 conjunts are in the unsatisfiable core [2022-11-22 01:54:45,162 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:45,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:45,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:54:45,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:45,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:45,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:46,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:46,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:46,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:46,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:46,439 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:46,441 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:46,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:54:46,446 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 8 proven. 148 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:46,446 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:46,567 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_962 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_962) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:54:46,808 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_962 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_962) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)))) is different from false [2022-11-22 01:54:46,904 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:46,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:54:46,912 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:54:46,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:54:46,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:54:47,496 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 8 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 39 not checked. [2022-11-22 01:54:47,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1933399950] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:47,496 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1661684303] [2022-11-22 01:54:47,497 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:47,498 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:47,498 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:47,498 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:47,498 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:47,522 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:47,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:47,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:54:47,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:47,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:47,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:47,697 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:47,728 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:47,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:47,790 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:47,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:47,796 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:47,797 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:47,827 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:54:47,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:54:47,899 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:47,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:47,960 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:50,040 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5340#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:50,040 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:50,040 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:50,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 22, 23] total 60 [2022-11-22 01:54:50,041 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332618817] [2022-11-22 01:54:50,041 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:50,041 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2022-11-22 01:54:50,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:50,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2022-11-22 01:54:50,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=216, Invalid=4028, Unknown=54, NotChecked=258, Total=4556 [2022-11-22 01:54:50,042 INFO L87 Difference]: Start difference. First operand 54 states and 57 transitions. Second operand has 60 states, 60 states have (on average 2.1) internal successors, (126), 60 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:51,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:51,813 INFO L93 Difference]: Finished difference Result 82 states and 85 transitions. [2022-11-22 01:54:51,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-22 01:54:51,814 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 60 states have (on average 2.1) internal successors, (126), 60 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-22 01:54:51,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:51,814 INFO L225 Difference]: With dead ends: 82 [2022-11-22 01:54:51,814 INFO L226 Difference]: Without dead ends: 57 [2022-11-22 01:54:51,815 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 96 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 1605 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=400, Invalid=6355, Unknown=59, NotChecked=326, Total=7140 [2022-11-22 01:54:51,815 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 77 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 1399 mSolverCounterSat, 21 mSolverCounterUnsat, 9 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 1521 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 1399 IncrementalHoareTripleChecker+Invalid, 9 IncrementalHoareTripleChecker+Unknown, 92 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:51,816 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 71 Invalid, 1521 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 1399 Invalid, 9 Unknown, 92 Unchecked, 0.8s Time] [2022-11-22 01:54:51,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-22 01:54:51,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-22 01:54:51,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 54 states have (on average 1.0925925925925926) internal successors, (59), 55 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:51,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 59 transitions. [2022-11-22 01:54:51,818 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 59 transitions. Word has length 45 [2022-11-22 01:54:51,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:51,818 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 59 transitions. [2022-11-22 01:54:51,818 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 60 states have (on average 2.1) internal successors, (126), 60 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:51,818 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 59 transitions. [2022-11-22 01:54:51,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-22 01:54:51,819 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:51,819 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 8, 1, 1, 1, 1, 1] [2022-11-22 01:54:51,825 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:52,023 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-22 01:54:52,023 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:52,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:52,023 INFO L85 PathProgramCache]: Analyzing trace with hash 1686310993, now seen corresponding path program 12 times [2022-11-22 01:54:52,023 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:52,023 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769056185] [2022-11-22 01:54:52,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:52,024 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:52,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:52,761 INFO L134 CoverageAnalysis]: Checked inductivity of 173 backedges. 56 proven. 117 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:52,761 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:52,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769056185] [2022-11-22 01:54:52,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1769056185] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:52,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [457335553] [2022-11-22 01:54:52,761 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:54:52,762 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:52,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:52,763 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:52,786 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-22 01:54:53,199 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:54:53,199 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:54:53,203 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-22 01:54:53,204 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:53,217 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:54:53,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:54:53,541 INFO L134 CoverageAnalysis]: Checked inductivity of 173 backedges. 72 proven. 101 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:53,541 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:54,272 INFO L134 CoverageAnalysis]: Checked inductivity of 173 backedges. 72 proven. 101 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:54,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [457335553] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:54:54,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1937818717] [2022-11-22 01:54:54,273 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:54:54,273 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:54:54,273 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:54:54,274 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:54:54,274 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:54:54,298 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:54,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:54:54,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:54,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:54,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:54,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:54,459 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:54,482 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:54:54,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:54:54,557 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:54,561 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:54:54,562 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:54,563 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:54:54,599 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:54:54,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:54:54,653 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:54:54,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:54:54,712 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:54:56,527 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5849#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:54:56,527 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:54:56,527 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:54:56,527 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 21] total 52 [2022-11-22 01:54:56,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [836193334] [2022-11-22 01:54:56,527 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:54:56,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-22 01:54:56,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:54:56,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-22 01:54:56,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=460, Invalid=3200, Unknown=0, NotChecked=0, Total=3660 [2022-11-22 01:54:56,529 INFO L87 Difference]: Start difference. First operand 56 states and 59 transitions. Second operand has 53 states, 52 states have (on average 2.25) internal successors, (117), 53 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:57,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:54:57,168 INFO L93 Difference]: Finished difference Result 57 states and 59 transitions. [2022-11-22 01:54:57,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-22 01:54:57,168 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 52 states have (on average 2.25) internal successors, (117), 53 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-22 01:54:57,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:54:57,169 INFO L225 Difference]: With dead ends: 57 [2022-11-22 01:54:57,169 INFO L226 Difference]: Without dead ends: 57 [2022-11-22 01:54:57,170 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 170 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1534 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=878, Invalid=4234, Unknown=0, NotChecked=0, Total=5112 [2022-11-22 01:54:57,170 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 194 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 695 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 703 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 695 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:54:57,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 1 Invalid, 703 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 695 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-22 01:54:57,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-22 01:54:57,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-22 01:54:57,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 54 states have (on average 1.0740740740740742) internal successors, (58), 55 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:57,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 58 transitions. [2022-11-22 01:54:57,173 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 58 transitions. Word has length 47 [2022-11-22 01:54:57,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:54:57,173 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 58 transitions. [2022-11-22 01:54:57,174 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 52 states have (on average 2.25) internal successors, (117), 53 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:54:57,174 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 58 transitions. [2022-11-22 01:54:57,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-22 01:54:57,174 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:54:57,175 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2022-11-22 01:54:57,183 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-22 01:54:57,381 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:57,381 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:54:57,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:54:57,382 INFO L85 PathProgramCache]: Analyzing trace with hash -1341681048, now seen corresponding path program 13 times [2022-11-22 01:54:57,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:54:57,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1771935457] [2022-11-22 01:54:57,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:54:57,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:54:57,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:58,713 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 9 proven. 189 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:58,713 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:54:58,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1771935457] [2022-11-22 01:54:58,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1771935457] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:54:58,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2078357971] [2022-11-22 01:54:58,714 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:54:58,714 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:54:58,714 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:54:58,716 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:54:58,717 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-22 01:54:58,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:54:58,897 INFO L263 TraceCheckSpWp]: Trace formula consists of 401 conjuncts, 102 conjunts are in the unsatisfiable core [2022-11-22 01:54:58,900 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:54:58,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:54:59,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:54:59,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:54:59,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,519 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:54:59,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:54:59,603 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 9 proven. 189 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:54:59,603 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:54:59,755 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1144 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1144) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 01:54:59,837 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1144 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1144) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:55:00,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 01:55:00,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 01:55:00,322 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 9 proven. 144 refuted. 0 times theorem prover too weak. 0 trivial. 45 not checked. [2022-11-22 01:55:00,322 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2078357971] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:00,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1282221506] [2022-11-22 01:55:00,323 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:55:00,324 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:00,324 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:00,324 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:00,324 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:00,346 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:00,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:00,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:00,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:00,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:00,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:00,516 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:00,545 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:55:00,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:55:00,593 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:00,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:00,598 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:00,599 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:00,626 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:55:00,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:55:00,678 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:00,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:00,738 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:02,636 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6332#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:02,636 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:02,637 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:02,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 25, 25] total 46 [2022-11-22 01:55:02,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1401122024] [2022-11-22 01:55:02,637 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:02,637 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-22 01:55:02,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:02,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-22 01:55:02,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=2464, Unknown=46, NotChecked=202, Total=2862 [2022-11-22 01:55:02,639 INFO L87 Difference]: Start difference. First operand 56 states and 58 transitions. Second operand has 46 states, 46 states have (on average 2.130434782608696) internal successors, (98), 46 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:04,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:04,594 INFO L93 Difference]: Finished difference Result 87 states and 89 transitions. [2022-11-22 01:55:04,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-22 01:55:04,595 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 2.130434782608696) internal successors, (98), 46 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-22 01:55:04,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:04,595 INFO L225 Difference]: With dead ends: 87 [2022-11-22 01:55:04,596 INFO L226 Difference]: Without dead ends: 59 [2022-11-22 01:55:04,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 121 SyntacticMatches, 7 SemanticMatches, 74 ConstructedPredicates, 2 IntricatePredicates, 1 DeprecatedPredicates, 952 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=357, Invalid=5003, Unknown=50, NotChecked=290, Total=5700 [2022-11-22 01:55:04,597 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 116 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 1436 mSolverCounterSat, 24 mSolverCounterUnsat, 46 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 1570 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 1436 IncrementalHoareTripleChecker+Invalid, 46 IncrementalHoareTripleChecker+Unknown, 64 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:04,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 72 Invalid, 1570 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 1436 Invalid, 46 Unknown, 64 Unchecked, 0.9s Time] [2022-11-22 01:55:04,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-22 01:55:04,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 58. [2022-11-22 01:55:04,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 56 states have (on average 1.0714285714285714) internal successors, (60), 57 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:04,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 60 transitions. [2022-11-22 01:55:04,600 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 60 transitions. Word has length 50 [2022-11-22 01:55:04,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:04,600 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 60 transitions. [2022-11-22 01:55:04,600 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 2.130434782608696) internal successors, (98), 46 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:04,601 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 60 transitions. [2022-11-22 01:55:04,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-22 01:55:04,601 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:04,601 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 1, 1, 1, 1, 1] [2022-11-22 01:55:04,607 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:04,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-22 01:55:04,807 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:55:04,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:04,808 INFO L85 PathProgramCache]: Analyzing trace with hash -1220294538, now seen corresponding path program 14 times [2022-11-22 01:55:04,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:04,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1488090899] [2022-11-22 01:55:04,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:04,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:04,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:05,723 INFO L134 CoverageAnalysis]: Checked inductivity of 217 backedges. 72 proven. 145 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:05,723 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:05,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1488090899] [2022-11-22 01:55:05,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1488090899] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:05,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [444139564] [2022-11-22 01:55:05,723 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:55:05,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:05,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:05,724 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:05,727 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-22 01:55:06,453 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-22 01:55:06,454 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:06,459 INFO L263 TraceCheckSpWp]: Trace formula consists of 401 conjuncts, 152 conjunts are in the unsatisfiable core [2022-11-22 01:55:06,462 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:06,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:55:06,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:55:06,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:07,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:07,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:07,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:07,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 23 [2022-11-22 01:55:07,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 29 [2022-11-22 01:55:07,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 35 [2022-11-22 01:55:08,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 43 [2022-11-22 01:55:08,350 INFO L321 Elim1Store]: treesize reduction 16, result has 62.8 percent of original size [2022-11-22 01:55:08,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 5 case distinctions, treesize of input 49 treesize of output 49 [2022-11-22 01:55:08,490 INFO L134 CoverageAnalysis]: Checked inductivity of 217 backedges. 11 proven. 186 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-22 01:55:08,490 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:11,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 01:55:11,256 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:11,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 116 treesize of output 72 [2022-11-22 01:55:11,285 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:11,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 137 treesize of output 140 [2022-11-22 01:55:11,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:11,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:11,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:11,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:11,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:13,118 INFO L134 CoverageAnalysis]: Checked inductivity of 217 backedges. 16 proven. 197 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-22 01:55:13,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [444139564] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:13,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1342567619] [2022-11-22 01:55:13,120 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:55:13,120 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:13,120 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:13,120 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:13,121 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:13,143 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:13,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:13,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:13,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:13,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:13,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:13,324 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:13,356 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:55:13,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:55:13,399 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:13,402 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:13,403 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:13,404 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:13,406 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:13,436 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:55:13,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:55:13,503 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:13,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:13,561 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:16,016 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6912#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:16,016 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:16,016 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:16,017 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 24, 32] total 76 [2022-11-22 01:55:16,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70332807] [2022-11-22 01:55:16,017 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:16,017 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-22 01:55:16,017 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:16,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-22 01:55:16,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=593, Invalid=6461, Unknown=86, NotChecked=0, Total=7140 [2022-11-22 01:55:16,018 INFO L87 Difference]: Start difference. First operand 58 states and 60 transitions. Second operand has 77 states, 76 states have (on average 1.9078947368421053) internal successors, (145), 77 states have internal predecessors, (145), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:26,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:26,467 INFO L93 Difference]: Finished difference Result 76 states and 77 transitions. [2022-11-22 01:55:26,467 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-22 01:55:26,467 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 76 states have (on average 1.9078947368421053) internal successors, (145), 77 states have internal predecessors, (145), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-22 01:55:26,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:26,468 INFO L225 Difference]: With dead ends: 76 [2022-11-22 01:55:26,468 INFO L226 Difference]: Without dead ends: 76 [2022-11-22 01:55:26,469 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 227 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 134 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3330 ImplicationChecksByTransitivity, 16.1s TimeCoverageRelationStatistics Valid=2512, Invalid=15746, Unknown=102, NotChecked=0, Total=18360 [2022-11-22 01:55:26,470 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 477 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1684 mSolverCounterSat, 183 mSolverCounterUnsat, 26 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 477 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 1893 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 183 IncrementalHoareTripleChecker+Valid, 1684 IncrementalHoareTripleChecker+Invalid, 26 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:26,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [477 Valid, 1 Invalid, 1893 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [183 Valid, 1684 Invalid, 26 Unknown, 0 Unchecked, 1.9s Time] [2022-11-22 01:55:26,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-22 01:55:26,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 69. [2022-11-22 01:55:26,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 67 states have (on average 1.0895522388059702) internal successors, (73), 68 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:26,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 73 transitions. [2022-11-22 01:55:26,472 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 73 transitions. Word has length 52 [2022-11-22 01:55:26,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:26,472 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 73 transitions. [2022-11-22 01:55:26,473 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 76 states have (on average 1.9078947368421053) internal successors, (145), 77 states have internal predecessors, (145), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:26,473 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 73 transitions. [2022-11-22 01:55:26,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-22 01:55:26,473 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:26,474 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2022-11-22 01:55:26,480 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:26,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:26,679 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:55:26,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:26,679 INFO L85 PathProgramCache]: Analyzing trace with hash 1721292848, now seen corresponding path program 6 times [2022-11-22 01:55:26,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:26,679 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [939946143] [2022-11-22 01:55:26,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:26,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:26,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:27,998 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 127 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:27,998 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:27,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [939946143] [2022-11-22 01:55:27,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [939946143] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:27,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1344051235] [2022-11-22 01:55:27,999 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:55:27,999 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:27,999 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:28,000 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:28,008 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-22 01:55:28,624 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:55:28,624 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:28,630 INFO L263 TraceCheckSpWp]: Trace formula consists of 443 conjuncts, 127 conjunts are in the unsatisfiable core [2022-11-22 01:55:28,633 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:28,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:55:29,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:55:29,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:29,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:29,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:29,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:29,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:29,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:30,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:30,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:30,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:30,474 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:30,475 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:30,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:55:30,532 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 20 proven. 235 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:30,532 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:31,350 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1354 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1354) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:55:31,361 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1354 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1354) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-22 01:55:31,371 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1354 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1354) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-22 01:55:31,386 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:31,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:55:31,393 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:31,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:55:31,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:32,442 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 20 proven. 163 refuted. 0 times theorem prover too weak. 0 trivial. 72 not checked. [2022-11-22 01:55:32,442 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1344051235] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:32,442 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2143413475] [2022-11-22 01:55:32,444 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:55:32,444 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:32,444 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:32,444 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:32,444 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:32,468 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:32,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:32,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:55:32,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:32,663 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:32,686 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:55:32,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:55:32,740 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:32,741 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:32,743 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:32,745 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:32,779 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:55:32,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:55:32,835 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:32,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:32,898 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:35,427 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7572#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:35,427 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:35,427 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:35,427 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 27, 27] total 75 [2022-11-22 01:55:35,427 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121779250] [2022-11-22 01:55:35,427 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:35,428 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-11-22 01:55:35,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:35,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-11-22 01:55:35,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=254, Invalid=5979, Unknown=99, NotChecked=474, Total=6806 [2022-11-22 01:55:35,429 INFO L87 Difference]: Start difference. First operand 69 states and 73 transitions. Second operand has 75 states, 75 states have (on average 2.1466666666666665) internal successors, (161), 75 states have internal predecessors, (161), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:40,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:40,759 INFO L93 Difference]: Finished difference Result 103 states and 107 transitions. [2022-11-22 01:55:40,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-22 01:55:40,760 INFO L78 Accepts]: Start accepts. Automaton has has 75 states, 75 states have (on average 2.1466666666666665) internal successors, (161), 75 states have internal predecessors, (161), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-22 01:55:40,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:40,760 INFO L225 Difference]: With dead ends: 103 [2022-11-22 01:55:40,760 INFO L226 Difference]: Without dead ends: 72 [2022-11-22 01:55:40,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 2106 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=630, Invalid=11936, Unknown=102, NotChecked=672, Total=13340 [2022-11-22 01:55:40,761 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 56 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 2612 mSolverCounterSat, 42 mSolverCounterUnsat, 39 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 2846 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 2612 IncrementalHoareTripleChecker+Invalid, 39 IncrementalHoareTripleChecker+Unknown, 153 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:40,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 72 Invalid, 2846 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 2612 Invalid, 39 Unknown, 153 Unchecked, 1.8s Time] [2022-11-22 01:55:40,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-11-22 01:55:40,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 71. [2022-11-22 01:55:40,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 69 states have (on average 1.0869565217391304) internal successors, (75), 70 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:40,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 75 transitions. [2022-11-22 01:55:40,764 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 75 transitions. Word has length 56 [2022-11-22 01:55:40,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:40,765 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 75 transitions. [2022-11-22 01:55:40,765 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 75 states, 75 states have (on average 2.1466666666666665) internal successors, (161), 75 states have internal predecessors, (161), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:40,765 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 75 transitions. [2022-11-22 01:55:40,765 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-22 01:55:40,766 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:40,766 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 1, 1, 1, 1, 1] [2022-11-22 01:55:40,775 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:40,973 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:40,973 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:55:40,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:40,974 INFO L85 PathProgramCache]: Analyzing trace with hash -2048144450, now seen corresponding path program 7 times [2022-11-22 01:55:40,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:40,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [777989124] [2022-11-22 01:55:40,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:40,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:41,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:42,302 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 81 proven. 195 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:42,302 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:42,302 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [777989124] [2022-11-22 01:55:42,302 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [777989124] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:42,302 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1243852030] [2022-11-22 01:55:42,302 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:55:42,302 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:42,303 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:42,303 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:42,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-22 01:55:42,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:42,510 INFO L263 TraceCheckSpWp]: Trace formula consists of 456 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-22 01:55:42,513 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:42,570 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:42,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:55:42,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:55:43,992 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 100 proven. 176 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:43,992 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:45,630 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:45,704 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 121 proven. 155 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:45,705 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1243852030] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:45,705 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [152015681] [2022-11-22 01:55:45,706 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:55:45,706 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:45,707 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:45,707 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:45,707 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:45,746 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:45,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:45,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:45,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:45,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:45,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:45,924 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:45,947 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:55:45,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:55:45,999 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:45,999 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:46,004 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:46,006 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:46,041 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:55:46,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:55:46,096 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:46,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:46,147 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:55:48,477 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8240#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:55:48,477 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:55:48,477 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:55:48,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 25, 25] total 75 [2022-11-22 01:55:48,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1157812012] [2022-11-22 01:55:48,478 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:55:48,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-22 01:55:48,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:55:48,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-22 01:55:48,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=548, Invalid=6592, Unknown=0, NotChecked=0, Total=7140 [2022-11-22 01:55:48,479 INFO L87 Difference]: Start difference. First operand 71 states and 75 transitions. Second operand has 77 states, 76 states have (on average 2.289473684210526) internal successors, (174), 76 states have internal predecessors, (174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:51,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:55:51,269 INFO L93 Difference]: Finished difference Result 71 states and 74 transitions. [2022-11-22 01:55:51,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-22 01:55:51,269 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 76 states have (on average 2.289473684210526) internal successors, (174), 76 states have internal predecessors, (174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-11-22 01:55:51,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:55:51,270 INFO L225 Difference]: With dead ends: 71 [2022-11-22 01:55:51,270 INFO L226 Difference]: Without dead ends: 71 [2022-11-22 01:55:51,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2716 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=1601, Invalid=10171, Unknown=0, NotChecked=0, Total=11772 [2022-11-22 01:55:51,272 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 423 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1546 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 423 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1554 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 1546 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-22 01:55:51,272 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [423 Valid, 0 Invalid, 1554 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 1546 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-22 01:55:51,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-22 01:55:51,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-11-22 01:55:51,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 69 states have (on average 1.0724637681159421) internal successors, (74), 70 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:51,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 74 transitions. [2022-11-22 01:55:51,274 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 74 transitions. Word has length 58 [2022-11-22 01:55:51,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:55:51,274 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 74 transitions. [2022-11-22 01:55:51,275 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 76 states have (on average 2.289473684210526) internal successors, (174), 76 states have internal predecessors, (174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:55:51,275 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 74 transitions. [2022-11-22 01:55:51,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-22 01:55:51,275 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:55:51,275 INFO L195 NwaCegarLoop]: trace histogram [12, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2022-11-22 01:55:51,280 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-22 01:55:51,475 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-22 01:55:51,476 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:55:51,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:55:51,476 INFO L85 PathProgramCache]: Analyzing trace with hash -1965893873, now seen corresponding path program 8 times [2022-11-22 01:55:51,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:55:51,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938439970] [2022-11-22 01:55:51,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:55:51,476 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:55:51,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:55:52,940 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 156 proven. 152 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:52,940 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:55:52,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938439970] [2022-11-22 01:55:52,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938439970] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:55:52,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1384612140] [2022-11-22 01:55:52,940 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:55:52,941 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:55:52,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:55:52,941 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:55:52,944 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-22 01:55:54,027 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-11-22 01:55:54,028 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:55:54,033 INFO L263 TraceCheckSpWp]: Trace formula consists of 479 conjuncts, 128 conjunts are in the unsatisfiable core [2022-11-22 01:55:54,037 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:55:54,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:55:54,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:55:54,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:54,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:55,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:55:56,001 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:56,003 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:56,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:55:56,064 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 22 proven. 286 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:55:56,064 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:55:56,432 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1571 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1571) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 01:55:56,441 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1571 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1571) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-22 01:55:56,569 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1571 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1571) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-22 01:55:56,578 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1571 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1571) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:55:56,956 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:56,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:55:56,962 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:55:56,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:55:56,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:55:58,129 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 22 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 102 not checked. [2022-11-22 01:55:58,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1384612140] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:55:58,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2051806998] [2022-11-22 01:55:58,131 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:55:58,131 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:55:58,131 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:55:58,131 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:55:58,131 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:55:58,172 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:58,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:55:58,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:58,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:58,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:58,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:55:58,327 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:58,357 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:55:58,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:55:58,421 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:58,424 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:58,425 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:55:58,426 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:58,427 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:55:58,464 INFO L321 Elim1Store]: treesize reduction 99, result has 15.4 percent of original size [2022-11-22 01:55:58,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 48 treesize of output 52 [2022-11-22 01:55:58,521 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:55:58,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:55:58,570 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:01,210 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8878#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:01,210 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:01,210 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:01,210 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 28, 29] total 80 [2022-11-22 01:56:01,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517740740] [2022-11-22 01:56:01,211 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:01,211 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-11-22 01:56:01,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:01,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-11-22 01:56:01,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=6600, Unknown=115, NotChecked=668, Total=7656 [2022-11-22 01:56:01,212 INFO L87 Difference]: Start difference. First operand 71 states and 74 transitions. Second operand has 80 states, 80 states have (on average 2.2) internal successors, (176), 80 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:07,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:07,380 INFO L93 Difference]: Finished difference Result 108 states and 111 transitions. [2022-11-22 01:56:07,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-22 01:56:07,380 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 80 states have (on average 2.2) internal successors, (176), 80 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-11-22 01:56:07,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:07,381 INFO L225 Difference]: With dead ends: 108 [2022-11-22 01:56:07,381 INFO L226 Difference]: Without dead ends: 74 [2022-11-22 01:56:07,382 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 122 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 2348 ImplicationChecksByTransitivity, 10.9s TimeCoverageRelationStatistics Valid=724, Invalid=13454, Unknown=118, NotChecked=956, Total=15252 [2022-11-22 01:56:07,383 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 106 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 2631 mSolverCounterSat, 46 mSolverCounterUnsat, 90 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 63 SdHoareTripleChecker+Invalid, 2967 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 2631 IncrementalHoareTripleChecker+Invalid, 90 IncrementalHoareTripleChecker+Unknown, 200 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:07,383 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 63 Invalid, 2967 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 2631 Invalid, 90 Unknown, 200 Unchecked, 1.9s Time] [2022-11-22 01:56:07,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-11-22 01:56:07,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 73. [2022-11-22 01:56:07,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 71 states have (on average 1.0704225352112675) internal successors, (76), 72 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:07,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 76 transitions. [2022-11-22 01:56:07,386 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 76 transitions. Word has length 61 [2022-11-22 01:56:07,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:07,386 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 76 transitions. [2022-11-22 01:56:07,386 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 80 states have (on average 2.2) internal successors, (176), 80 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:07,386 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 76 transitions. [2022-11-22 01:56:07,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-22 01:56:07,387 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:07,387 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 11, 11, 1, 1, 1, 1, 1] [2022-11-22 01:56:07,399 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:07,595 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-22 01:56:07,595 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:56:07,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:07,595 INFO L85 PathProgramCache]: Analyzing trace with hash -894440383, now seen corresponding path program 9 times [2022-11-22 01:56:07,596 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:07,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [422247763] [2022-11-22 01:56:07,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:07,596 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:07,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:09,154 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 100 proven. 231 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:09,154 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:09,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [422247763] [2022-11-22 01:56:09,155 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [422247763] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:09,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1800665473] [2022-11-22 01:56:09,155 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:56:09,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:09,155 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:09,156 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:09,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-22 01:56:10,447 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:56:10,448 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:56:10,454 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 98 conjunts are in the unsatisfiable core [2022-11-22 01:56:10,457 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:10,538 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-22 01:56:10,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-22 01:56:10,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:56:12,325 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 121 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:12,326 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:14,211 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:14,289 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 144 proven. 187 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:14,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1800665473] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:14,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1536669360] [2022-11-22 01:56:14,291 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:56:14,291 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:14,291 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:14,291 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:14,292 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:14,314 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:14,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:14,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:14,525 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:14,558 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:56:14,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:56:14,635 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:14,636 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:14,638 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:14,640 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:14,681 INFO L321 Elim1Store]: treesize reduction 99, result has 15.4 percent of original size [2022-11-22 01:56:14,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 48 treesize of output 52 [2022-11-22 01:56:14,740 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:14,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:14,804 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:17,254 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9595#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:17,254 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:17,254 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:17,254 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 27] total 81 [2022-11-22 01:56:17,254 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [435025263] [2022-11-22 01:56:17,254 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:17,255 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2022-11-22 01:56:17,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:17,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2022-11-22 01:56:17,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=620, Invalid=7570, Unknown=0, NotChecked=0, Total=8190 [2022-11-22 01:56:17,256 INFO L87 Difference]: Start difference. First operand 73 states and 76 transitions. Second operand has 83 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:20,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:20,422 INFO L93 Difference]: Finished difference Result 73 states and 75 transitions. [2022-11-22 01:56:20,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-22 01:56:20,423 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2022-11-22 01:56:20,423 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:20,423 INFO L225 Difference]: With dead ends: 73 [2022-11-22 01:56:20,423 INFO L226 Difference]: Without dead ends: 73 [2022-11-22 01:56:20,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3152 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=1845, Invalid=11727, Unknown=0, NotChecked=0, Total=13572 [2022-11-22 01:56:20,424 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 452 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1870 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 452 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1885 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 1870 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:20,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [452 Valid, 0 Invalid, 1885 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 1870 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-22 01:56:20,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-22 01:56:20,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-22 01:56:20,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 71 states have (on average 1.056338028169014) internal successors, (75), 72 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:20,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 75 transitions. [2022-11-22 01:56:20,427 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 75 transitions. Word has length 63 [2022-11-22 01:56:20,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:20,427 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 75 transitions. [2022-11-22 01:56:20,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:20,428 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 75 transitions. [2022-11-22 01:56:20,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-22 01:56:20,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:20,428 INFO L195 NwaCegarLoop]: trace histogram [13, 12, 12, 12, 12, 1, 1, 1, 1, 1] [2022-11-22 01:56:20,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:20,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:20,636 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:56:20,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:20,637 INFO L85 PathProgramCache]: Analyzing trace with hash -296336468, now seen corresponding path program 10 times [2022-11-22 01:56:20,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:20,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680083692] [2022-11-22 01:56:20,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:20,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:20,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:22,240 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 188 proven. 178 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:22,240 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:22,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680083692] [2022-11-22 01:56:22,240 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680083692] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:22,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [281994750] [2022-11-22 01:56:22,240 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:56:22,240 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:22,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:22,241 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:22,243 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-22 01:56:22,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:22,486 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 131 conjunts are in the unsatisfiable core [2022-11-22 01:56:22,490 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:22,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:56:23,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:23,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:23,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:23,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:23,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:23,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:23,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:24,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:24,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:24,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:24,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:24,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:56:24,768 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 01:56:24,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:56:24,834 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 24 proven. 342 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:24,834 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:25,111 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1805 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1805) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:56:25,121 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1805 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1805) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 01:56:25,265 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1805 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1805) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:56:25,405 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1805 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1805) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:56:25,415 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1805 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1805) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-22 01:56:25,695 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1805 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_1805) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 11)) 0)) is different from false [2022-11-22 01:56:25,706 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:56:25,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:56:25,712 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:56:25,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:56:26,091 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 24 proven. 189 refuted. 0 times theorem prover too weak. 0 trivial. 153 not checked. [2022-11-22 01:56:26,092 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [281994750] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:26,092 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1499855003] [2022-11-22 01:56:26,093 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:56:26,093 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:26,093 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:26,093 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:26,093 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:26,116 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:26,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:26,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:26,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:26,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:26,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:26,284 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:26,314 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:56:26,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:56:26,363 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:26,367 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:26,368 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:26,368 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:26,369 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:26,406 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:56:26,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 52 treesize of output 54 [2022-11-22 01:56:26,471 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:26,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:26,519 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:29,091 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10265#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:29,091 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:29,092 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:29,092 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 31, 31] total 74 [2022-11-22 01:56:29,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1480741538] [2022-11-22 01:56:29,092 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:29,093 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-11-22 01:56:29,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:29,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-11-22 01:56:29,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=260, Invalid=5360, Unknown=104, NotChecked=918, Total=6642 [2022-11-22 01:56:29,094 INFO L87 Difference]: Start difference. First operand 73 states and 75 transitions. Second operand has 74 states, 74 states have (on average 2.27027027027027) internal successors, (168), 74 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:35,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:56:35,178 INFO L93 Difference]: Finished difference Result 113 states and 115 transitions. [2022-11-22 01:56:35,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-11-22 01:56:35,178 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 74 states have (on average 2.27027027027027) internal successors, (168), 74 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-11-22 01:56:35,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:56:35,179 INFO L225 Difference]: With dead ends: 113 [2022-11-22 01:56:35,179 INFO L226 Difference]: Without dead ends: 76 [2022-11-22 01:56:35,180 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 146 SyntacticMatches, 2 SemanticMatches, 120 ConstructedPredicates, 6 IntricatePredicates, 2 DeprecatedPredicates, 2364 ImplicationChecksByTransitivity, 10.4s TimeCoverageRelationStatistics Valid=702, Invalid=12555, Unknown=107, NotChecked=1398, Total=14762 [2022-11-22 01:56:35,180 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 32 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 2274 mSolverCounterSat, 48 mSolverCounterUnsat, 141 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 2687 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 2274 IncrementalHoareTripleChecker+Invalid, 141 IncrementalHoareTripleChecker+Unknown, 224 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:56:35,180 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 70 Invalid, 2687 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 2274 Invalid, 141 Unknown, 224 Unchecked, 2.0s Time] [2022-11-22 01:56:35,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-22 01:56:35,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 75. [2022-11-22 01:56:35,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 73 states have (on average 1.0547945205479452) internal successors, (77), 74 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:35,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 77 transitions. [2022-11-22 01:56:35,182 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 77 transitions. Word has length 66 [2022-11-22 01:56:35,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:56:35,183 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 77 transitions. [2022-11-22 01:56:35,183 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 74 states have (on average 2.27027027027027) internal successors, (168), 74 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:56:35,183 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 77 transitions. [2022-11-22 01:56:35,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-22 01:56:35,183 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:56:35,184 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 12, 12, 1, 1, 1, 1, 1] [2022-11-22 01:56:35,199 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-22 01:56:35,390 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-22 01:56:35,390 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:56:35,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:56:35,390 INFO L85 PathProgramCache]: Analyzing trace with hash 1001430458, now seen corresponding path program 11 times [2022-11-22 01:56:35,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:56:35,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1414137051] [2022-11-22 01:56:35,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:56:35,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:56:35,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:56:37,128 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 121 proven. 270 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:56:37,128 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:56:37,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1414137051] [2022-11-22 01:56:37,128 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1414137051] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:56:37,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [564959208] [2022-11-22 01:56:37,128 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:56:37,128 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:56:37,129 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:56:37,129 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:56:37,131 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-22 01:56:39,836 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 13 check-sat command(s) [2022-11-22 01:56:39,836 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:56:39,845 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 189 conjunts are in the unsatisfiable core [2022-11-22 01:56:39,851 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:56:39,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:56:39,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-22 01:56:40,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:56:41,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:56:41,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:56:41,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:56:41,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:56:41,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:56:41,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 23 [2022-11-22 01:56:42,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 31 [2022-11-22 01:56:42,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 35 [2022-11-22 01:56:42,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 43 [2022-11-22 01:56:42,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-11-22 01:56:43,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 63 treesize of output 53 [2022-11-22 01:56:43,587 INFO L321 Elim1Store]: treesize reduction 24, result has 57.9 percent of original size [2022-11-22 01:56:43,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 22 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 7 case distinctions, treesize of input 65 treesize of output 63 [2022-11-22 01:56:43,593 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-22 01:56:43,600 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 01:56:43,767 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 86 proven. 275 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-22 01:56:43,767 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:56:49,977 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:56:49,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 162 treesize of output 96 [2022-11-22 01:56:50,019 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:56:50,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 187 treesize of output 194 [2022-11-22 01:56:50,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:50,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:50,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:50,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:50,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:50,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:50,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:56:54,167 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:54,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:56:54,175 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 01:56:54,314 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 20 proven. 335 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-22 01:56:54,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [564959208] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:56:54,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1342337527] [2022-11-22 01:56:54,315 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:56:54,315 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:56:54,315 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:56:54,315 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:56:54,315 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:56:54,336 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:54,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:56:54,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:56:54,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:54,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:54,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:56:54,502 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:54,525 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:56:54,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:56:54,568 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:54,571 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:56:54,572 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:54,573 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:56:54,601 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:56:54,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:56:54,666 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:56:54,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:56:54,715 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:56:57,734 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11050#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:56:57,734 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:56:57,734 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:56:57,734 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 33, 41] total 103 [2022-11-22 01:56:57,734 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [45045609] [2022-11-22 01:56:57,734 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:56:57,735 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 105 states [2022-11-22 01:56:57,735 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:56:57,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 105 interpolants. [2022-11-22 01:56:57,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=831, Invalid=11649, Unknown=176, NotChecked=0, Total=12656 [2022-11-22 01:56:57,736 INFO L87 Difference]: Start difference. First operand 75 states and 77 transitions. Second operand has 105 states, 104 states have (on average 1.7788461538461537) internal successors, (185), 104 states have internal predecessors, (185), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:16,673 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2022-11-22 01:57:22,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:57:22,729 INFO L93 Difference]: Finished difference Result 97 states and 98 transitions. [2022-11-22 01:57:22,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 68 states. [2022-11-22 01:57:22,729 INFO L78 Accepts]: Start accepts. Automaton has has 105 states, 104 states have (on average 1.7788461538461537) internal successors, (185), 104 states have internal predecessors, (185), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-11-22 01:57:22,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:57:22,730 INFO L225 Difference]: With dead ends: 97 [2022-11-22 01:57:22,730 INFO L226 Difference]: Without dead ends: 97 [2022-11-22 01:57:22,731 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 296 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 176 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6250 ImplicationChecksByTransitivity, 33.4s TimeCoverageRelationStatistics Valid=4458, Invalid=26846, Unknown=202, NotChecked=0, Total=31506 [2022-11-22 01:57:22,732 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 1208 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3064 mSolverCounterSat, 338 mSolverCounterUnsat, 35 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1208 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 3437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 338 IncrementalHoareTripleChecker+Valid, 3064 IncrementalHoareTripleChecker+Invalid, 35 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:57:22,732 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1208 Valid, 0 Invalid, 3437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [338 Valid, 3064 Invalid, 35 Unknown, 0 Unchecked, 5.7s Time] [2022-11-22 01:57:22,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-22 01:57:22,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 91. [2022-11-22 01:57:22,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 89 states have (on average 1.0898876404494382) internal successors, (97), 90 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:22,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 97 transitions. [2022-11-22 01:57:22,734 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 97 transitions. Word has length 68 [2022-11-22 01:57:22,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:57:22,735 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 97 transitions. [2022-11-22 01:57:22,735 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 105 states, 104 states have (on average 1.7788461538461537) internal successors, (185), 104 states have internal predecessors, (185), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:22,735 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 97 transitions. [2022-11-22 01:57:22,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-22 01:57:22,735 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:57:22,736 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 14, 13, 13, 1, 1, 1, 1, 1] [2022-11-22 01:57:22,747 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-22 01:57:22,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:22,944 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:57:22,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:57:22,944 INFO L85 PathProgramCache]: Analyzing trace with hash -1189848071, now seen corresponding path program 15 times [2022-11-22 01:57:22,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:57:22,944 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2113083229] [2022-11-22 01:57:22,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:57:22,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:57:22,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:57:25,332 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 0 proven. 456 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:25,332 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:57:25,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2113083229] [2022-11-22 01:57:25,333 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2113083229] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:57:25,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1200644764] [2022-11-22 01:57:25,333 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:57:25,333 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:25,333 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:57:25,334 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:57:25,336 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-22 01:57:26,142 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:57:26,142 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:57:26,150 INFO L263 TraceCheckSpWp]: Trace formula consists of 568 conjuncts, 174 conjunts are in the unsatisfiable core [2022-11-22 01:57:26,154 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:57:27,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:57:27,468 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:27,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:27,625 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:27,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:27,770 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:27,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:27,924 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:27,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,078 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,229 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,373 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,520 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,665 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,816 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:28,964 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:28,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:29,117 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:29,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-22 01:57:29,359 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:29,361 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:57:29,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:57:29,446 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 52 proven. 403 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:57:29,446 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:57:35,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 167 treesize of output 161 [2022-11-22 01:57:37,451 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 52 proven. 403 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-22 01:57:37,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1200644764] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:57:37,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [178281307] [2022-11-22 01:57:37,452 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:57:37,452 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:57:37,453 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:57:37,453 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:57:37,453 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:57:37,483 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:37,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:57:37,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:57:37,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:37,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:37,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:37,687 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:37,712 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:57:37,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:57:37,759 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:37,763 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:37,764 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:37,765 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:37,796 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:57:37,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:57:37,854 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:57:37,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:57:37,916 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:57:41,107 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11904#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:57:41,107 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:57:41,108 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:57:41,108 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 33, 34] total 96 [2022-11-22 01:57:41,108 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330736489] [2022-11-22 01:57:41,108 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:57:41,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 96 states [2022-11-22 01:57:41,109 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:57:41,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 96 interpolants. [2022-11-22 01:57:41,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=262, Invalid=10450, Unknown=0, NotChecked=0, Total=10712 [2022-11-22 01:57:41,110 INFO L87 Difference]: Start difference. First operand 91 states and 97 transitions. Second operand has 96 states, 96 states have (on average 2.1979166666666665) internal successors, (211), 96 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:52,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:57:52,810 INFO L93 Difference]: Finished difference Result 134 states and 140 transitions. [2022-11-22 01:57:52,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-22 01:57:52,810 INFO L78 Accepts]: Start accepts. Automaton has has 96 states, 96 states have (on average 2.1979166666666665) internal successors, (211), 96 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-11-22 01:57:52,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:57:52,811 INFO L225 Difference]: With dead ends: 134 [2022-11-22 01:57:52,811 INFO L226 Difference]: Without dead ends: 94 [2022-11-22 01:57:52,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 292 GetRequests, 138 SyntacticMatches, 10 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2443 ImplicationChecksByTransitivity, 22.8s TimeCoverageRelationStatistics Valid=832, Invalid=20338, Unknown=0, NotChecked=0, Total=21170 [2022-11-22 01:57:52,812 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 192 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 4772 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 4822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 4772 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-22 01:57:52,812 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 76 Invalid, 4822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 4772 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2022-11-22 01:57:52,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-22 01:57:52,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 93. [2022-11-22 01:57:52,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 91 states have (on average 1.0879120879120878) internal successors, (99), 92 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:52,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 99 transitions. [2022-11-22 01:57:52,816 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 99 transitions. Word has length 73 [2022-11-22 01:57:52,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:57:52,816 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 99 transitions. [2022-11-22 01:57:52,816 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 96 states, 96 states have (on average 2.1979166666666665) internal successors, (211), 96 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:57:52,816 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 99 transitions. [2022-11-22 01:57:52,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-11-22 01:57:52,817 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:57:52,817 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 14, 14, 14, 1, 1, 1, 1, 1] [2022-11-22 01:57:52,826 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-22 01:57:53,025 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-22 01:57:53,026 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:57:53,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:57:53,026 INFO L85 PathProgramCache]: Analyzing trace with hash 1787901483, now seen corresponding path program 16 times [2022-11-22 01:57:53,026 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:57:53,026 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1099069151] [2022-11-22 01:57:53,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:57:53,026 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:57:53,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:57:55,262 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 14 proven. 469 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:55,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:57:55,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1099069151] [2022-11-22 01:57:55,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1099069151] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:57:55,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1028012779] [2022-11-22 01:57:55,263 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:57:55,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:57:55,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:57:55,264 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:57:55,266 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-22 01:57:55,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:57:55,526 INFO L263 TraceCheckSpWp]: Trace formula consists of 581 conjuncts, 149 conjunts are in the unsatisfiable core [2022-11-22 01:57:55,530 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:57:55,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:57:56,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:56,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:57:56,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:57:56,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-22 01:57:56,825 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 14 proven. 469 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:57:56,825 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:57:56,837 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2227 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2227) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 01:57:56,845 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2227 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2227) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:57:56,981 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2227 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2227) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-22 01:57:56,992 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2227 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2227) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:57:57,003 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2227 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2227) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)))) is different from false [2022-11-22 01:57:57,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-22 01:57:57,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 01:57:57,988 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 14 proven. 313 refuted. 0 times theorem prover too weak. 0 trivial. 156 not checked. [2022-11-22 01:57:57,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1028012779] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:57:57,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2126923439] [2022-11-22 01:57:57,989 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:57:57,989 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:57:57,990 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:57:57,990 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:57:57,990 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:57:58,018 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:58,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:57:58,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:57:58,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:58,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:58,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:57:58,196 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:58,228 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:57:58,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:57:58,271 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:58,275 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:57:58,276 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:58,277 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:57:58,316 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 01:57:58,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 01:57:58,378 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:57:58,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:57:58,458 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:58:00,906 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12729#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:58:00,906 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:58:00,906 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:58:00,906 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [34, 35, 35] total 62 [2022-11-22 01:58:00,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1388255282] [2022-11-22 01:58:00,906 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:58:00,907 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-22 01:58:00,907 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:58:00,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-22 01:58:00,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=3967, Unknown=28, NotChecked=650, Total=4830 [2022-11-22 01:58:00,908 INFO L87 Difference]: Start difference. First operand 93 states and 99 transitions. Second operand has 62 states, 62 states have (on average 2.193548387096774) internal successors, (136), 62 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:05,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:58:05,149 INFO L93 Difference]: Finished difference Result 139 states and 145 transitions. [2022-11-22 01:58:05,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-22 01:58:05,149 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 2.193548387096774) internal successors, (136), 62 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-11-22 01:58:05,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:58:05,150 INFO L225 Difference]: With dead ends: 139 [2022-11-22 01:58:05,150 INFO L226 Difference]: Without dead ends: 96 [2022-11-22 01:58:05,151 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 304 GetRequests, 192 SyntacticMatches, 11 SemanticMatches, 101 ConstructedPredicates, 5 IntricatePredicates, 2 DeprecatedPredicates, 1540 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=495, Invalid=8998, Unknown=33, NotChecked=980, Total=10506 [2022-11-22 01:58:05,151 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 176 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 2833 mSolverCounterSat, 19 mSolverCounterUnsat, 101 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 3226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 2833 IncrementalHoareTripleChecker+Invalid, 101 IncrementalHoareTripleChecker+Unknown, 273 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-22 01:58:05,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 90 Invalid, 3226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 2833 Invalid, 101 Unknown, 273 Unchecked, 2.1s Time] [2022-11-22 01:58:05,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-22 01:58:05,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 95. [2022-11-22 01:58:05,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 93 states have (on average 1.086021505376344) internal successors, (101), 94 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:05,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 101 transitions. [2022-11-22 01:58:05,154 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 101 transitions. Word has length 75 [2022-11-22 01:58:05,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:58:05,154 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 101 transitions. [2022-11-22 01:58:05,154 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 2.193548387096774) internal successors, (136), 62 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:05,155 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 101 transitions. [2022-11-22 01:58:05,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-11-22 01:58:05,155 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:58:05,155 INFO L195 NwaCegarLoop]: trace histogram [15, 15, 14, 14, 14, 1, 1, 1, 1, 1] [2022-11-22 01:58:05,163 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-11-22 01:58:05,361 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-22 01:58:05,362 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:58:05,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:58:05,362 INFO L85 PathProgramCache]: Analyzing trace with hash -1337963555, now seen corresponding path program 17 times [2022-11-22 01:58:05,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:58:05,362 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977645842] [2022-11-22 01:58:05,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:58:05,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:58:05,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:58:06,928 INFO L134 CoverageAnalysis]: Checked inductivity of 512 backedges. 182 proven. 330 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:58:06,928 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:58:06,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1977645842] [2022-11-22 01:58:06,928 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1977645842] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:58:06,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1414588586] [2022-11-22 01:58:06,929 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:58:06,929 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:58:06,929 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:58:06,930 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:58:06,933 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-22 01:58:10,084 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 15 check-sat command(s) [2022-11-22 01:58:10,084 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:58:10,095 INFO L263 TraceCheckSpWp]: Trace formula consists of 581 conjuncts, 209 conjunts are in the unsatisfiable core [2022-11-22 01:58:10,100 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:58:10,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:58:11,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:58:11,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:58:11,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:58:11,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:58:11,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:58:11,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:58:11,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:58:12,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 23 [2022-11-22 01:58:12,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 31 [2022-11-22 01:58:12,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 35 [2022-11-22 01:58:12,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 49 treesize of output 43 [2022-11-22 01:58:13,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-11-22 01:58:13,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 65 treesize of output 55 [2022-11-22 01:58:14,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 71 treesize of output 59 [2022-11-22 01:58:14,443 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,443 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,444 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,445 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,446 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,447 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,448 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:14,497 INFO L321 Elim1Store]: treesize reduction 28, result has 58.2 percent of original size [2022-11-22 01:58:14,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 8 case distinctions, treesize of input 75 treesize of output 73 [2022-11-22 01:58:14,500 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-22 01:58:14,515 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 01:58:14,717 INFO L134 CoverageAnalysis]: Checked inductivity of 512 backedges. 95 proven. 397 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-22 01:58:14,717 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:58:22,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-22 01:58:22,571 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:58:22,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 185 treesize of output 108 [2022-11-22 01:58:22,636 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:58:22,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 212 treesize of output 221 [2022-11-22 01:58:22,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:22,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:58:23,617 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-22 01:58:23,627 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-22 01:58:23,641 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-22 01:58:24,863 INFO L134 CoverageAnalysis]: Checked inductivity of 512 backedges. 25 proven. 415 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-11-22 01:58:24,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1414588586] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:58:24,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1850268685] [2022-11-22 01:58:24,864 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:58:24,864 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:58:24,864 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:58:24,865 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:58:24,865 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:58:24,895 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:24,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:58:24,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 01:58:24,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:24,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:25,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:58:25,064 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:58:25,096 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:58:25,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:58:25,142 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:25,146 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:58:25,147 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:58:25,147 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:58:25,186 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:58:25,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:58:25,254 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:58:25,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:58:25,313 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:58:28,518 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13606#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:58:28,518 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:58:28,519 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:58:28,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [32, 39, 42] total 111 [2022-11-22 01:58:28,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922531169] [2022-11-22 01:58:28,519 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:58:28,519 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 112 states [2022-11-22 01:58:28,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:58:28,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 112 interpolants. [2022-11-22 01:58:28,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1182, Invalid=12867, Unknown=231, NotChecked=0, Total=14280 [2022-11-22 01:58:28,521 INFO L87 Difference]: Start difference. First operand 95 states and 101 transitions. Second operand has 112 states, 111 states have (on average 1.864864864864865) internal successors, (207), 112 states have internal predecessors, (207), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:42,921 WARN L859 $PredicateComparison]: unable to prove that (let ((.cse0 (select |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~from#1.base|)) (.cse6 (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse7 (select |c_#length| |c_ULTIMATE.start_cstpcpy_~from#1.base|))) (let ((.cse8 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) (.cse11 (select |c_#length| |c_ULTIMATE.start_main_~nondetString~0#1.base|)) (.cse10 (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse9 (<= .cse6 .cse7)) (.cse3 (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse5 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) (.cse1 (= (select .cse0 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) 0)) (.cse2 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)) (.cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1))) (and (not (= (select .cse0 7) 0)) (<= 7 (+ |c_ULTIMATE.start_main_~length2~0#1| |c_ULTIMATE.start_main_~nondetString~0#1.offset|)) (not (= (select .cse0 (+ (- 1) |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) (= |c_ULTIMATE.start_cstpcpy_~from#1.offset| 13) (= 0 |c_ULTIMATE.start_main_~nondetArea~0#1.offset|) (not (= (select .cse0 11) 0)) (or .cse1 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse2) 0)) (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse3) 0)) (forall ((v_ArrVal_2368 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2368) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0)) (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse5) 0)) (forall ((v_ArrVal_2369 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2369) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse6) 0)) (<= (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8) .cse7) (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse8) 0)) (not (<= 0 .cse8))) (<= 14 |c_ULTIMATE.start_main_~i~0#1|) (or (and (= |c_ULTIMATE.start_cstpcpy_#t~mem4#1| 0) (<= .cse4 .cse7)) .cse9) (or (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse8) 0)) (forall ((v_ArrVal_2367 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2367) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0)) .cse1 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse3) 0)) (forall ((v_ArrVal_2369 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2369) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse5) 0)) (forall ((v_ArrVal_2368 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2368) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse6) 0)) (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse10) 0)) (not (<= 0 .cse10)) (<= (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 9) .cse7) (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse2) 0))) (not (= (select .cse0 6) 0)) (not (= (select .cse0 9) 0)) (or (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse6) 0)) .cse1 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse2) 0)) (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0)) (not (<= 0 .cse2)) (<= .cse8 .cse7) (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse5) 0))) (<= 13 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) (exists ((|ULTIMATE.start_main_~length2~0#1| Int)) (and (<= |ULTIMATE.start_main_~length2~0#1| .cse7) (<= 7 |ULTIMATE.start_main_~length2~0#1|) (= (select .cse0 (+ (- 1) |ULTIMATE.start_main_~length2~0#1|)) 0))) (<= 6 (+ |c_ULTIMATE.start_main_~i~0#1| |c_ULTIMATE.start_main_~nondetString~0#1.offset|)) (not (= |c_ULTIMATE.start_main_~nondetString~0#1.base| |c_ULTIMATE.start_main_~nondetArea~0#1.base|)) (or .cse1 (<= .cse5 .cse7) (not (<= 0 .cse4)) (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0))) (<= |c_ULTIMATE.start_main_~i~0#1| |c_ULTIMATE.start_main_~length2~0#1|) (= |c_ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= (+ 15 |c_ULTIMATE.start_main_~nondetString~0#1.offset|) .cse11) (= |c_ULTIMATE.start_main_~length2~0#1| (+ .cse11 (* (div |c_ULTIMATE.start_main_~length2~0#1| 4294967296) 4294967296))) (or .cse1 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse3) 0)) (forall ((v_ArrVal_2369 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2369) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0)) (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse6) 0)) (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse2) 0)) (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse5) 0)) (<= .cse10 .cse7) (not (<= 0 .cse3))) .cse9 (or .cse1 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0)) (not (<= 0 .cse5)) (<= .cse3 .cse7) (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse5) 0)) (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse6) 0))) (not (= (select .cse0 10) 0)) (or (not (<= 0 .cse6)) .cse1 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse6) 0)) (<= .cse2 .cse7) (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0))) (not (= (select .cse0 8) 0))))) is different from true [2022-11-22 01:58:46,339 WARN L837 $PredicateComparison]: unable to prove that (let ((.cse38 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1))) (let ((.cse43 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) (.cse42 (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse39 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)) (.cse37 (<= 0 .cse38)) (.cse41 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) (.cse40 (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse22 (select |c_#length| |c_ULTIMATE.start_cstpcpy_~from#1.base|))) (let ((.cse29 (<= .cse40 .cse22)) (.cse10 (<= .cse41 .cse22)) (.cse11 (not .cse37)) (.cse12 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse38) 0))) (.cse14 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse39) 0))) (.cse15 (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse42) 0))) (.cse16 (forall ((v_ArrVal_2368 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2368) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse38) 0))) (.cse17 (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse41) 0))) (.cse18 (forall ((v_ArrVal_2369 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2369) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse40) 0))) (.cse19 (<= (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8) .cse22)) (.cse20 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse43) 0))) (.cse21 (not (<= 0 .cse43))) (.cse23 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse40) 0))) (.cse0 (= |c_ULTIMATE.start_cstpcpy_#t~mem4#1| 0)) (.cse24 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse39) 0))) (.cse25 (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse38) 0))) (.cse26 (not (<= 0 .cse39))) (.cse27 (<= .cse43 .cse22)) (.cse28 (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse41) 0))) (.cse30 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse42) 0))) (.cse31 (forall ((v_ArrVal_2369 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2369) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse38) 0))) (.cse32 (forall ((v_ArrVal_2370 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2370) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse40) 0))) (.cse33 (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse39) 0))) (.cse34 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse41) 0))) (.cse35 (<= (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) .cse22)) (.cse36 (not (<= 0 .cse42))) (.cse1 (forall ((v_ArrVal_2371 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2371) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse38) 0))) (.cse2 (not (<= 0 .cse41))) (.cse3 (<= .cse42 .cse22)) (.cse4 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse41) 0))) (.cse5 (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse40) 0))) (.cse6 (not (<= 0 .cse40))) (.cse13 (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~from#1.base|) |c_ULTIMATE.start_cstpcpy_~from#1.offset|) 0)) (.cse7 (forall ((v_ArrVal_2373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2373) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse40) 0))) (.cse8 (<= .cse39 .cse22)) (.cse9 (forall ((v_ArrVal_2372 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2372) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse38) 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse8 .cse9) (or .cse0 .cse10 .cse11 .cse12) (or .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21) (<= 15 .cse22) (or .cse23 .cse13 .cse24 .cse25 .cse26 .cse27 .cse28) (or .cse13 (not (<= 0 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) .cse29) (or .cse0 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36) (or .cse0 (and .cse37 .cse29)) (or .cse13 .cse10 .cse11 .cse12) (or .cse0 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21) (or .cse23 .cse0 .cse24 .cse25 .cse26 .cse27 .cse28) (or .cse13 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36) (or .cse13 .cse1 .cse2 .cse3 .cse4 .cse5) (= |c_ULTIMATE.start_cstpcpy_~from#1.offset| 14) (or .cse6 .cse13 .cse7 .cse8 .cse9))))) is different from false [2022-11-22 01:58:56,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:58:56,435 INFO L93 Difference]: Finished difference Result 106 states and 107 transitions. [2022-11-22 01:58:56,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 79 states. [2022-11-22 01:58:56,436 INFO L78 Accepts]: Start accepts. Automaton has has 112 states, 111 states have (on average 1.864864864864865) internal successors, (207), 112 states have internal predecessors, (207), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 77 [2022-11-22 01:58:56,436 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:58:56,437 INFO L225 Difference]: With dead ends: 106 [2022-11-22 01:58:56,437 INFO L226 Difference]: Without dead ends: 106 [2022-11-22 01:58:56,439 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 194 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 8768 ImplicationChecksByTransitivity, 38.9s TimeCoverageRelationStatistics Valid=4888, Invalid=32267, Unknown=295, NotChecked=770, Total=38220 [2022-11-22 01:58:56,440 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 643 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 3209 mSolverCounterSat, 401 mSolverCounterUnsat, 66 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 643 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 3678 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 401 IncrementalHoareTripleChecker+Valid, 3209 IncrementalHoareTripleChecker+Invalid, 66 IncrementalHoareTripleChecker+Unknown, 2 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-11-22 01:58:56,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [643 Valid, 8 Invalid, 3678 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [401 Valid, 3209 Invalid, 66 Unknown, 2 Unchecked, 4.7s Time] [2022-11-22 01:58:56,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-11-22 01:58:56,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 103. [2022-11-22 01:58:56,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 101 states have (on average 1.0495049504950495) internal successors, (106), 102 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:56,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 106 transitions. [2022-11-22 01:58:56,443 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 106 transitions. Word has length 77 [2022-11-22 01:58:56,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:58:56,443 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 106 transitions. [2022-11-22 01:58:56,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 112 states, 111 states have (on average 1.864864864864865) internal successors, (207), 112 states have internal predecessors, (207), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:58:56,443 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 106 transitions. [2022-11-22 01:58:56,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-22 01:58:56,444 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:58:56,444 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 15, 15, 1, 1, 1, 1, 1] [2022-11-22 01:58:56,457 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-22 01:58:56,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable38,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:58:56,644 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:58:56,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:58:56,645 INFO L85 PathProgramCache]: Analyzing trace with hash -1366216873, now seen corresponding path program 12 times [2022-11-22 01:58:56,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:58:56,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1519326251] [2022-11-22 01:58:56,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:58:56,645 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:58:56,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:58:59,187 INFO L134 CoverageAnalysis]: Checked inductivity of 776 backedges. 496 proven. 280 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:58:59,187 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:58:59,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1519326251] [2022-11-22 01:58:59,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1519326251] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:58:59,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1166845842] [2022-11-22 01:58:59,188 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 01:58:59,188 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:58:59,188 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:58:59,189 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:58:59,191 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-22 01:59:02,595 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 01:59:02,595 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 01:59:02,604 INFO L263 TraceCheckSpWp]: Trace formula consists of 715 conjuncts, 162 conjunts are in the unsatisfiable core [2022-11-22 01:59:02,608 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:02,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:59:03,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 01:59:04,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:04,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:04,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:04,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:04,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:04,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:05,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:05,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:05,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:05,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:05,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:05,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:06,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:06,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 01:59:06,502 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:06,504 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:06,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 01:59:06,599 INFO L134 CoverageAnalysis]: Checked inductivity of 776 backedges. 210 proven. 540 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-11-22 01:59:06,599 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:07,165 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 01:59:07,367 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:59:07,377 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-22 01:59:07,562 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-22 01:59:07,738 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 10)) 0)) is different from false [2022-11-22 01:59:07,919 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 12)) 0)) is different from false [2022-11-22 01:59:08,100 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2542 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2542) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 14)) 0)) is different from false [2022-11-22 01:59:08,110 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:08,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:59:08,117 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:08,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:59:08,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 01:59:10,259 INFO L134 CoverageAnalysis]: Checked inductivity of 776 backedges. 210 proven. 309 refuted. 0 times theorem prover too weak. 26 trivial. 231 not checked. [2022-11-22 01:59:10,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1166845842] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:10,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [737903948] [2022-11-22 01:59:10,260 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:59:10,261 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:10,261 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:10,261 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:10,261 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:10,288 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:10,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:10,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:10,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:10,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:10,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:10,445 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:10,471 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:59:10,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:59:10,532 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:10,534 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:10,536 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:10,538 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:10,578 INFO L321 Elim1Store]: treesize reduction 99, result has 15.4 percent of original size [2022-11-22 01:59:10,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 48 treesize of output 52 [2022-11-22 01:59:10,634 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:10,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:10,686 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:14,084 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14636#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:14,084 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:14,084 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:14,084 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [40, 37, 37] total 109 [2022-11-22 01:59:14,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682218475] [2022-11-22 01:59:14,084 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:14,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 109 states [2022-11-22 01:59:14,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:14,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 109 interpolants. [2022-11-22 01:59:14,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=454, Invalid=11408, Unknown=156, NotChecked=1554, Total=13572 [2022-11-22 01:59:14,086 INFO L87 Difference]: Start difference. First operand 103 states and 106 transitions. Second operand has 109 states, 109 states have (on average 2.293577981651376) internal successors, (250), 109 states have internal predecessors, (250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:25,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:25,550 INFO L93 Difference]: Finished difference Result 152 states and 155 transitions. [2022-11-22 01:59:25,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-22 01:59:25,551 INFO L78 Accepts]: Start accepts. Automaton has has 109 states, 109 states have (on average 2.293577981651376) internal successors, (250), 109 states have internal predecessors, (250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 93 [2022-11-22 01:59:25,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:25,552 INFO L225 Difference]: With dead ends: 152 [2022-11-22 01:59:25,552 INFO L226 Difference]: Without dead ends: 106 [2022-11-22 01:59:25,553 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 377 GetRequests, 214 SyntacticMatches, 0 SemanticMatches, 163 ConstructedPredicates, 7 IntricatePredicates, 0 DeprecatedPredicates, 4355 ImplicationChecksByTransitivity, 19.2s TimeCoverageRelationStatistics Valid=1097, Invalid=23578, Unknown=159, NotChecked=2226, Total=27060 [2022-11-22 01:59:25,553 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 53 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 3892 mSolverCounterSat, 48 mSolverCounterUnsat, 161 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 4544 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 3892 IncrementalHoareTripleChecker+Invalid, 161 IncrementalHoareTripleChecker+Unknown, 443 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:25,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 96 Invalid, 4544 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 3892 Invalid, 161 Unknown, 443 Unchecked, 3.6s Time] [2022-11-22 01:59:25,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-11-22 01:59:25,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 105. [2022-11-22 01:59:25,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 103 states have (on average 1.0485436893203883) internal successors, (108), 104 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:25,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 108 transitions. [2022-11-22 01:59:25,556 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 108 transitions. Word has length 93 [2022-11-22 01:59:25,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:25,556 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 108 transitions. [2022-11-22 01:59:25,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 109 states, 109 states have (on average 2.293577981651376) internal successors, (250), 109 states have internal predecessors, (250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:25,557 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 108 transitions. [2022-11-22 01:59:25,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-11-22 01:59:25,557 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:25,558 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 16, 16, 1, 1, 1, 1, 1] [2022-11-22 01:59:25,575 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-11-22 01:59:25,768 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-22 01:59:25,768 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:59:25,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:25,768 INFO L85 PathProgramCache]: Analyzing trace with hash -2130903927, now seen corresponding path program 13 times [2022-11-22 01:59:25,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:25,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [25319622] [2022-11-22 01:59:25,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:25,768 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:25,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:28,383 INFO L134 CoverageAnalysis]: Checked inductivity of 807 backedges. 496 proven. 311 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:59:28,383 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:28,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [25319622] [2022-11-22 01:59:28,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [25319622] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:28,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1110349143] [2022-11-22 01:59:28,383 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 01:59:28,383 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:28,384 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:28,384 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:28,387 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-22 01:59:28,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:28,731 INFO L263 TraceCheckSpWp]: Trace formula consists of 728 conjuncts, 165 conjunts are in the unsatisfiable core [2022-11-22 01:59:28,736 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 01:59:28,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 01:59:30,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:30,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:30,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:30,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:30,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:30,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:30,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:31,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:31,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:31,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:31,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:31,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:31,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:32,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:32,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:32,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 01:59:32,898 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 01:59:32,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 01:59:32,992 INFO L134 CoverageAnalysis]: Checked inductivity of 807 backedges. 176 proven. 616 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-22 01:59:32,992 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 01:59:33,200 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2714 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2714) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 01:59:33,208 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2714 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2714) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 01:59:33,219 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2714 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2714) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 01:59:33,959 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2714 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2714) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-22 01:59:33,969 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2714 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2714) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-22 01:59:34,992 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2714 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2714) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 15)) 0)) is different from false [2022-11-22 01:59:35,003 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:35,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 01:59:35,010 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 01:59:35,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 01:59:35,547 INFO L134 CoverageAnalysis]: Checked inductivity of 807 backedges. 176 proven. 401 refuted. 0 times theorem prover too weak. 15 trivial. 215 not checked. [2022-11-22 01:59:35,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1110349143] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 01:59:35,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1445295412] [2022-11-22 01:59:35,549 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 01:59:35,549 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 01:59:35,550 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 01:59:35,550 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 01:59:35,550 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 01:59:35,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:35,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 01:59:35,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:35,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:35,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:35,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 01:59:35,757 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:35,789 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 01:59:35,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 01:59:35,842 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:35,846 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 01:59:35,847 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:35,847 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 01:59:35,878 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 01:59:35,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 01:59:35,940 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 01:59:35,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 01:59:36,014 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 01:59:39,223 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15670#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 01:59:39,223 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 01:59:39,223 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 01:59:39,223 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [41, 39, 39] total 97 [2022-11-22 01:59:39,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2001680392] [2022-11-22 01:59:39,223 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 01:59:39,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2022-11-22 01:59:39,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 01:59:39,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2022-11-22 01:59:39,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=415, Invalid=8991, Unknown=320, NotChecked=1194, Total=10920 [2022-11-22 01:59:39,226 INFO L87 Difference]: Start difference. First operand 105 states and 108 transitions. Second operand has 97 states, 97 states have (on average 2.381443298969072) internal successors, (231), 97 states have internal predecessors, (231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:51,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 01:59:51,043 INFO L93 Difference]: Finished difference Result 157 states and 160 transitions. [2022-11-22 01:59:51,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-22 01:59:51,044 INFO L78 Accepts]: Start accepts. Automaton has has 97 states, 97 states have (on average 2.381443298969072) internal successors, (231), 97 states have internal predecessors, (231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 95 [2022-11-22 01:59:51,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 01:59:51,044 INFO L225 Difference]: With dead ends: 157 [2022-11-22 01:59:51,044 INFO L226 Difference]: Without dead ends: 108 [2022-11-22 01:59:51,046 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 389 GetRequests, 232 SyntacticMatches, 2 SemanticMatches, 155 ConstructedPredicates, 6 IntricatePredicates, 2 DeprecatedPredicates, 4146 ImplicationChecksByTransitivity, 18.3s TimeCoverageRelationStatistics Valid=1110, Invalid=21241, Unknown=323, NotChecked=1818, Total=24492 [2022-11-22 01:59:51,046 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 52 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 4078 mSolverCounterSat, 52 mSolverCounterUnsat, 228 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 4695 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 4078 IncrementalHoareTripleChecker+Invalid, 228 IncrementalHoareTripleChecker+Unknown, 337 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2022-11-22 01:59:51,046 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 89 Invalid, 4695 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 4078 Invalid, 228 Unknown, 337 Unchecked, 4.0s Time] [2022-11-22 01:59:51,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-22 01:59:51,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 107. [2022-11-22 01:59:51,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 105 states have (on average 1.0476190476190477) internal successors, (110), 106 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:51,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 110 transitions. [2022-11-22 01:59:51,049 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 110 transitions. Word has length 95 [2022-11-22 01:59:51,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 01:59:51,050 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 110 transitions. [2022-11-22 01:59:51,050 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 97 states, 97 states have (on average 2.381443298969072) internal successors, (231), 97 states have internal predecessors, (231), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 01:59:51,050 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 110 transitions. [2022-11-22 01:59:51,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-22 01:59:51,051 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 01:59:51,051 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 17, 17, 1, 1, 1, 1, 1] [2022-11-22 01:59:51,057 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Ended with exit code 0 [2022-11-22 01:59:51,255 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:51,255 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 01:59:51,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 01:59:51,256 INFO L85 PathProgramCache]: Analyzing trace with hash 1739212091, now seen corresponding path program 14 times [2022-11-22 01:59:51,256 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 01:59:51,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1635479320] [2022-11-22 01:59:51,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 01:59:51,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 01:59:51,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 01:59:53,908 INFO L134 CoverageAnalysis]: Checked inductivity of 840 backedges. 496 proven. 344 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 01:59:53,908 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 01:59:53,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1635479320] [2022-11-22 01:59:53,909 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1635479320] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 01:59:53,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1479266606] [2022-11-22 01:59:53,909 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 01:59:53,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 01:59:53,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 01:59:53,910 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 01:59:53,919 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-22 02:00:01,349 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 20 check-sat command(s) [2022-11-22 02:00:01,349 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:00:01,365 INFO L263 TraceCheckSpWp]: Trace formula consists of 741 conjuncts, 192 conjunts are in the unsatisfiable core [2022-11-22 02:00:01,370 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:00:01,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:00:03,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:00:03,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:03,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:03,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:03,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:03,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:03,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:04,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:04,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:04,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:04,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:04,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:04,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:05,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:05,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:05,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:05,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:05,858 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:05,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 7 [2022-11-22 02:00:05,974 INFO L134 CoverageAnalysis]: Checked inductivity of 840 backedges. 136 proven. 697 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-22 02:00:05,974 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:00:06,294 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2892 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2892) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 02:00:06,302 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2892 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2892) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:00:07,529 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2892 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2892) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-22 02:00:08,714 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2892 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_2892) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 16 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:00:08,727 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:00:08,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:00:08,734 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:00:08,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:00:08,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:00:11,518 INFO L134 CoverageAnalysis]: Checked inductivity of 840 backedges. 136 proven. 536 refuted. 0 times theorem prover too weak. 7 trivial. 161 not checked. [2022-11-22 02:00:11,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1479266606] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:00:11,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [858634546] [2022-11-22 02:00:11,520 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 02:00:11,520 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:00:11,520 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:00:11,521 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:00:11,521 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:00:11,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:11,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:00:11,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:00:11,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:11,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:11,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:11,737 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:11,772 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 02:00:11,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 02:00:11,824 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:11,828 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:11,829 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:11,830 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:11,869 INFO L321 Elim1Store]: treesize reduction 95, result has 15.9 percent of original size [2022-11-22 02:00:11,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 54 treesize of output 56 [2022-11-22 02:00:11,927 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:00:11,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:00:11,981 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:00:15,676 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16754#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 02:00:15,677 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:00:15,677 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:00:15,677 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [42, 40, 41] total 119 [2022-11-22 02:00:15,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439903336] [2022-11-22 02:00:15,677 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:00:15,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 119 states [2022-11-22 02:00:15,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:00:15,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 119 interpolants. [2022-11-22 02:00:15,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=480, Invalid=14236, Unknown=306, NotChecked=980, Total=16002 [2022-11-22 02:00:15,679 INFO L87 Difference]: Start difference. First operand 107 states and 110 transitions. Second operand has 119 states, 119 states have (on average 2.319327731092437) internal successors, (276), 119 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:00:30,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:00:30,518 INFO L93 Difference]: Finished difference Result 162 states and 165 transitions. [2022-11-22 02:00:30,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2022-11-22 02:00:30,519 INFO L78 Accepts]: Start accepts. Automaton has has 119 states, 119 states have (on average 2.319327731092437) internal successors, (276), 119 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 97 [2022-11-22 02:00:30,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:00:30,520 INFO L225 Difference]: With dead ends: 162 [2022-11-22 02:00:30,520 INFO L226 Difference]: Without dead ends: 110 [2022-11-22 02:00:30,521 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 400 GetRequests, 220 SyntacticMatches, 0 SemanticMatches, 180 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 5332 ImplicationChecksByTransitivity, 25.1s TimeCoverageRelationStatistics Valid=1276, Invalid=29935, Unknown=311, NotChecked=1420, Total=32942 [2022-11-22 02:00:30,522 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 54 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 4599 mSolverCounterSat, 53 mSolverCounterUnsat, 116 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 5005 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 4599 IncrementalHoareTripleChecker+Invalid, 116 IncrementalHoareTripleChecker+Unknown, 237 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-22 02:00:30,522 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 89 Invalid, 5005 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 4599 Invalid, 116 Unknown, 237 Unchecked, 3.8s Time] [2022-11-22 02:00:30,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2022-11-22 02:00:30,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 109. [2022-11-22 02:00:30,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 107 states have (on average 1.0467289719626167) internal successors, (112), 108 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:00:30,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 112 transitions. [2022-11-22 02:00:30,525 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 112 transitions. Word has length 97 [2022-11-22 02:00:30,525 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:00:30,525 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 112 transitions. [2022-11-22 02:00:30,525 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 119 states, 119 states have (on average 2.319327731092437) internal successors, (276), 119 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:00:30,525 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 112 transitions. [2022-11-22 02:00:30,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-11-22 02:00:30,526 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:00:30,526 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 18, 18, 1, 1, 1, 1, 1] [2022-11-22 02:00:30,538 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-22 02:00:30,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:00:30,738 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 02:00:30,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:00:30,739 INFO L85 PathProgramCache]: Analyzing trace with hash 1479027053, now seen corresponding path program 15 times [2022-11-22 02:00:30,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:00:30,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105783366] [2022-11-22 02:00:30,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:00:30,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:00:30,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:00:33,603 INFO L134 CoverageAnalysis]: Checked inductivity of 875 backedges. 496 proven. 379 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:00:33,604 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:00:33,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105783366] [2022-11-22 02:00:33,604 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105783366] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:00:33,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1248803666] [2022-11-22 02:00:33,604 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-22 02:00:33,604 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:00:33,604 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:00:33,605 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:00:33,617 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-22 02:00:35,921 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-22 02:00:35,921 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:00:35,931 INFO L263 TraceCheckSpWp]: Trace formula consists of 754 conjuncts, 189 conjunts are in the unsatisfiable core [2022-11-22 02:00:35,936 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:00:35,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:00:37,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-22 02:00:37,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:38,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:38,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:38,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:38,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:38,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:38,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:39,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:39,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:39,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:39,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:39,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:39,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:40,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:40,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:40,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:40,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-22 02:00:40,988 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:40,990 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:00:40,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-22 02:00:41,098 INFO L134 CoverageAnalysis]: Checked inductivity of 875 backedges. 90 proven. 783 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-22 02:00:41,099 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:00:41,546 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:00:41,556 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 02:00:41,566 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-22 02:00:41,576 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:00:41,793 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:00:42,457 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 11)) 0)) is different from false [2022-11-22 02:00:42,917 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 14)) 0)) is different from false [2022-11-22 02:00:43,146 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3074) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 16 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:00:43,378 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:00:43,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:00:43,384 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:00:43,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:00:43,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:00:46,330 INFO L134 CoverageAnalysis]: Checked inductivity of 875 backedges. 90 proven. 459 refuted. 0 times theorem prover too weak. 2 trivial. 324 not checked. [2022-11-22 02:00:46,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1248803666] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:00:46,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1934828375] [2022-11-22 02:00:46,331 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 02:00:46,331 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:00:46,332 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:00:46,332 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:00:46,332 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:00:46,361 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:46,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:00:46,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:00:46,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:46,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:46,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:00:46,532 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:46,566 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 02:00:46,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 02:00:46,626 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:46,627 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:00:46,629 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:46,631 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:00:46,664 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 02:00:46,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 02:00:46,726 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:00:46,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:00:46,786 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:00:50,544 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17869#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 02:00:50,544 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:00:50,544 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:00:50,544 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 43, 43] total 124 [2022-11-22 02:00:50,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1908591788] [2022-11-22 02:00:50,544 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:00:50,545 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 124 states [2022-11-22 02:00:50,545 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:00:50,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 124 interpolants. [2022-11-22 02:00:50,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=489, Invalid=14548, Unknown=247, NotChecked=2008, Total=17292 [2022-11-22 02:00:50,547 INFO L87 Difference]: Start difference. First operand 109 states and 112 transitions. Second operand has 124 states, 124 states have (on average 2.306451612903226) internal successors, (286), 124 states have internal predecessors, (286), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:07,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:01:07,534 INFO L93 Difference]: Finished difference Result 167 states and 170 transitions. [2022-11-22 02:01:07,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2022-11-22 02:01:07,535 INFO L78 Accepts]: Start accepts. Automaton has has 124 states, 124 states have (on average 2.306451612903226) internal successors, (286), 124 states have internal predecessors, (286), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 99 [2022-11-22 02:01:07,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:01:07,536 INFO L225 Difference]: With dead ends: 167 [2022-11-22 02:01:07,536 INFO L226 Difference]: Without dead ends: 112 [2022-11-22 02:01:07,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 401 GetRequests, 214 SyntacticMatches, 0 SemanticMatches, 187 ConstructedPredicates, 8 IntricatePredicates, 0 DeprecatedPredicates, 5410 ImplicationChecksByTransitivity, 25.6s TimeCoverageRelationStatistics Valid=1362, Invalid=31001, Unknown=249, NotChecked=2920, Total=35532 [2022-11-22 02:01:07,538 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 91 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 6586 mSolverCounterSat, 71 mSolverCounterUnsat, 257 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 7652 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 6586 IncrementalHoareTripleChecker+Invalid, 257 IncrementalHoareTripleChecker+Unknown, 738 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-11-22 02:01:07,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 105 Invalid, 7652 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 6586 Invalid, 257 Unknown, 738 Unchecked, 5.9s Time] [2022-11-22 02:01:07,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2022-11-22 02:01:07,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 111. [2022-11-22 02:01:07,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 109 states have (on average 1.0458715596330275) internal successors, (114), 110 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:07,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 114 transitions. [2022-11-22 02:01:07,541 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 114 transitions. Word has length 99 [2022-11-22 02:01:07,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:01:07,541 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 114 transitions. [2022-11-22 02:01:07,541 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 124 states, 124 states have (on average 2.306451612903226) internal successors, (286), 124 states have internal predecessors, (286), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:07,541 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 114 transitions. [2022-11-22 02:01:07,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-11-22 02:01:07,542 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:01:07,542 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 19, 19, 1, 1, 1, 1, 1] [2022-11-22 02:01:07,555 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-22 02:01:07,747 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-22 02:01:07,747 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 02:01:07,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:01:07,747 INFO L85 PathProgramCache]: Analyzing trace with hash 549308703, now seen corresponding path program 16 times [2022-11-22 02:01:07,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:01:07,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718303306] [2022-11-22 02:01:07,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:01:07,747 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:01:07,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:01:10,775 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 496 proven. 416 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:01:10,775 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:01:10,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718303306] [2022-11-22 02:01:10,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [718303306] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:01:10,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [980660481] [2022-11-22 02:01:10,776 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-22 02:01:10,776 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:01:10,776 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:01:10,777 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:01:10,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-22 02:01:11,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:01:11,150 INFO L263 TraceCheckSpWp]: Trace formula consists of 767 conjuncts, 196 conjunts are in the unsatisfiable core [2022-11-22 02:01:11,159 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:01:11,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:01:12,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:12,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:13,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:13,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:13,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:13,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:13,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:13,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:14,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:14,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:14,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:14,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:14,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:15,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:15,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:15,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:15,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:15,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:16,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-22 02:01:16,553 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-22 02:01:16,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-22 02:01:16,658 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 38 proven. 874 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:01:16,658 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:01:16,892 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-22 02:01:16,904 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:01:16,915 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-22 02:01:17,117 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:01:17,127 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-22 02:01:17,333 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-22 02:01:17,343 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-22 02:01:17,354 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 10)))) is different from false [2022-11-22 02:01:17,775 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 13)) 0)) is different from false [2022-11-22 02:01:18,186 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3262 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_3262) |c_ULTIMATE.start_cstpcpy_~from#1.base|) (+ 16 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) is different from false [2022-11-22 02:01:18,615 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:01:18,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-22 02:01:18,621 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:01:18,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-22 02:01:19,204 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 38 proven. 478 refuted. 0 times theorem prover too weak. 0 trivial. 396 not checked. [2022-11-22 02:01:19,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [980660481] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:01:19,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1006822868] [2022-11-22 02:01:19,206 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 02:01:19,206 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:01:19,206 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:01:19,206 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:01:19,206 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:01:19,230 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:19,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:01:19,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-22 02:01:19,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:19,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:19,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:01:19,397 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:01:19,423 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 02:01:19,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 02:01:19,506 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:19,507 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:19,510 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:01:19,510 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:01:19,511 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:01:19,541 INFO L321 Elim1Store]: treesize reduction 99, result has 15.4 percent of original size [2022-11-22 02:01:19,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 48 treesize of output 52 [2022-11-22 02:01:19,604 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:01:19,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:01:19,668 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:01:23,141 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18984#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 02:01:23,142 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:01:23,142 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:01:23,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [44, 45, 45] total 109 [2022-11-22 02:01:23,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1331308924] [2022-11-22 02:01:23,142 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:01:23,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 109 states [2022-11-22 02:01:23,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:01:23,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 109 interpolants. [2022-11-22 02:01:23,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=10609, Unknown=335, NotChecked=2190, Total=13572 [2022-11-22 02:01:23,145 INFO L87 Difference]: Start difference. First operand 111 states and 114 transitions. Second operand has 109 states, 109 states have (on average 2.376146788990826) internal successors, (259), 109 states have internal predecessors, (259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:40,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-22 02:01:40,419 INFO L93 Difference]: Finished difference Result 172 states and 175 transitions. [2022-11-22 02:01:40,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-22 02:01:40,420 INFO L78 Accepts]: Start accepts. Automaton has has 109 states, 109 states have (on average 2.376146788990826) internal successors, (259), 109 states have internal predecessors, (259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 101 [2022-11-22 02:01:40,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-22 02:01:40,420 INFO L225 Difference]: With dead ends: 172 [2022-11-22 02:01:40,421 INFO L226 Difference]: Without dead ends: 114 [2022-11-22 02:01:40,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 408 GetRequests, 230 SyntacticMatches, 2 SemanticMatches, 176 ConstructedPredicates, 10 IntricatePredicates, 2 DeprecatedPredicates, 4904 ImplicationChecksByTransitivity, 23.3s TimeCoverageRelationStatistics Valid=1353, Invalid=26403, Unknown=340, NotChecked=3410, Total=31506 [2022-11-22 02:01:40,423 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 79 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 5729 mSolverCounterSat, 75 mSolverCounterUnsat, 672 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 7393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 5729 IncrementalHoareTripleChecker+Invalid, 672 IncrementalHoareTripleChecker+Unknown, 917 IncrementalHoareTripleChecker+Unchecked, 6.2s IncrementalHoareTripleChecker+Time [2022-11-22 02:01:40,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 92 Invalid, 7393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 5729 Invalid, 672 Unknown, 917 Unchecked, 6.2s Time] [2022-11-22 02:01:40,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2022-11-22 02:01:40,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 113. [2022-11-22 02:01:40,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 111 states have (on average 1.045045045045045) internal successors, (116), 112 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:40,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 116 transitions. [2022-11-22 02:01:40,426 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 116 transitions. Word has length 101 [2022-11-22 02:01:40,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-22 02:01:40,427 INFO L495 AbstractCegarLoop]: Abstraction has 113 states and 116 transitions. [2022-11-22 02:01:40,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 109 states, 109 states have (on average 2.376146788990826) internal successors, (259), 109 states have internal predecessors, (259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-22 02:01:40,427 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 116 transitions. [2022-11-22 02:01:40,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-22 02:01:40,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-22 02:01:40,428 INFO L195 NwaCegarLoop]: trace histogram [20, 20, 20, 19, 19, 1, 1, 1, 1, 1] [2022-11-22 02:01:40,439 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-22 02:01:40,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-22 02:01:40,636 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-22 02:01:40,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-22 02:01:40,636 INFO L85 PathProgramCache]: Analyzing trace with hash 443171921, now seen corresponding path program 17 times [2022-11-22 02:01:40,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-22 02:01:40,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040484312] [2022-11-22 02:01:40,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-22 02:01:40,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-22 02:01:40,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-22 02:01:43,781 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 324 proven. 627 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-22 02:01:43,782 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-22 02:01:43,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040484312] [2022-11-22 02:01:43,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040484312] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-22 02:01:43,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2129495954] [2022-11-22 02:01:43,782 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-22 02:01:43,782 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-22 02:01:43,782 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 [2022-11-22 02:01:43,783 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-22 02:01:43,786 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8a4f67cc-3290-4f12-ac24-c79b8146f416/bin/utaipan-g80aRyZoba/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-22 02:01:52,795 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 20 check-sat command(s) [2022-11-22 02:01:52,796 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-22 02:01:52,813 INFO L263 TraceCheckSpWp]: Trace formula consists of 767 conjuncts, 259 conjunts are in the unsatisfiable core [2022-11-22 02:01:52,835 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-22 02:01:52,940 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-22 02:01:52,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-22 02:01:52,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:01:55,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-22 02:01:55,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:55,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:56,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:56,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:56,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:56,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:56,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:57,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:57,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-22 02:01:57,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 28 [2022-11-22 02:01:58,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:01:58,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:01:58,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:01:58,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:01:59,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:01:59,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:01:59,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:02:00,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 29 [2022-11-22 02:02:00,347 INFO L321 Elim1Store]: treesize reduction 4, result has 87.1 percent of original size [2022-11-22 02:02:00,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 30 treesize of output 37 [2022-11-22 02:02:01,319 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 29 proven. 832 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2022-11-22 02:02:01,319 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-22 02:02:07,291 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:02:07,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 36 [2022-11-22 02:02:07,305 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-22 02:02:07,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 62 treesize of output 59 [2022-11-22 02:02:07,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:02:07,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-22 02:02:13,109 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:02:13,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-22 02:02:13,305 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 147 proven. 795 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-22 02:02:13,306 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2129495954] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-22 02:02:13,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2031851212] [2022-11-22 02:02:13,311 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-22 02:02:13,311 INFO L166 IcfgInterpreter]: Building call graph [2022-11-22 02:02:13,311 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-22 02:02:13,312 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-22 02:02:13,312 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-22 02:02:13,336 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:02:13,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-22 02:02:13,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:02:13,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:02:13,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:02:13,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-22 02:02:13,518 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:02:13,543 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-22 02:02:13,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-22 02:02:13,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:02:13,595 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-22 02:02:13,598 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:02:13,599 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-22 02:02:13,639 INFO L321 Elim1Store]: treesize reduction 97, result has 15.7 percent of original size [2022-11-22 02:02:13,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 50 treesize of output 54 [2022-11-22 02:02:13,703 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-22 02:02:13,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-22 02:02:13,755 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-22 02:02:17,481 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20143#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (or (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstpcpy_~from#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstpcpy_~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|)) (and (<= 0 |ULTIMATE.start_cstpcpy_~to#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.offset|) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 1 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.base|) (<= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_#in~to#1.offset|) (<= 1 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_cstpcpy_#in~from#1.base|))) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_cstpcpy_~to#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|))) (= |#NULL.base| 0))' at error location [2022-11-22 02:02:17,481 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-22 02:02:17,481 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-22 02:02:17,481 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 38, 47] total 128 [2022-11-22 02:02:17,481 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [141386111] [2022-11-22 02:02:17,481 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-22 02:02:17,482 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 130 states [2022-11-22 02:02:17,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-22 02:02:17,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 130 interpolants. [2022-11-22 02:02:17,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1502, Invalid=17402, Unknown=2, NotChecked=0, Total=18906 [2022-11-22 02:02:17,483 INFO L87 Difference]: Start difference. First operand 113 states and 116 transitions. Second operand has 130 states, 129 states have (on average 2.2325581395348837) internal successors, (288), 129 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)