./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4b6873ae1a0d665798beb3dd9c0c48e89806da7dd46f1d2066800a52e0a2aa51 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-26 00:55:40,487 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-26 00:55:40,489 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-26 00:55:40,510 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-26 00:55:40,510 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-26 00:55:40,512 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-26 00:55:40,513 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-26 00:55:40,515 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-26 00:55:40,517 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-26 00:55:40,518 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-26 00:55:40,519 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-26 00:55:40,520 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-26 00:55:40,521 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-26 00:55:40,522 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-26 00:55:40,523 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-26 00:55:40,525 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-26 00:55:40,526 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-26 00:55:40,527 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-26 00:55:40,530 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-26 00:55:40,537 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-26 00:55:40,538 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-26 00:55:40,540 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-26 00:55:40,541 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-26 00:55:40,542 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-26 00:55:40,546 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-26 00:55:40,546 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-26 00:55:40,547 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-26 00:55:40,548 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-26 00:55:40,549 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-26 00:55:40,550 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-26 00:55:40,551 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-26 00:55:40,552 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-26 00:55:40,553 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-26 00:55:40,554 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-26 00:55:40,555 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-26 00:55:40,555 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-26 00:55:40,556 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-26 00:55:40,557 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-26 00:55:40,557 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-26 00:55:40,558 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-26 00:55:40,559 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-26 00:55:40,560 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-26 00:55:40,584 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-26 00:55:40,584 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-26 00:55:40,585 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-26 00:55:40,585 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-26 00:55:40,586 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-26 00:55:40,586 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-26 00:55:40,586 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-26 00:55:40,587 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-26 00:55:40,587 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-26 00:55:40,587 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-26 00:55:40,587 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-26 00:55:40,588 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-26 00:55:40,588 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-26 00:55:40,588 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-26 00:55:40,588 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-26 00:55:40,589 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-26 00:55:40,589 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-26 00:55:40,589 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-26 00:55:40,590 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-26 00:55:40,590 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-26 00:55:40,591 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-26 00:55:40,591 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-26 00:55:40,591 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-26 00:55:40,591 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-26 00:55:40,592 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-26 00:55:40,592 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-26 00:55:40,592 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-26 00:55:40,592 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-26 00:55:40,593 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-26 00:55:40,593 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-26 00:55:40,593 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-26 00:55:40,593 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-26 00:55:40,594 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-26 00:55:40,594 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-26 00:55:40,594 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-26 00:55:40,595 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-26 00:55:40,595 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-26 00:55:40,595 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-26 00:55:40,595 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-26 00:55:40,596 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-26 00:55:40,596 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-26 00:55:40,596 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-26 00:55:40,596 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4b6873ae1a0d665798beb3dd9c0c48e89806da7dd46f1d2066800a52e0a2aa51 [2022-11-26 00:55:40,834 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-26 00:55:40,856 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-26 00:55:40,858 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-26 00:55:40,860 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-26 00:55:40,860 INFO L275 PluginConnector]: CDTParser initialized [2022-11-26 00:55:40,861 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i [2022-11-26 00:55:43,802 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-26 00:55:44,116 INFO L351 CDTParser]: Found 1 translation units. [2022-11-26 00:55:44,117 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i [2022-11-26 00:55:44,136 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/data/921576e96/5e388a3ab835434b88c4f7c6fe55e3d6/FLAG6fc708ece [2022-11-26 00:55:44,157 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/data/921576e96/5e388a3ab835434b88c4f7c6fe55e3d6 [2022-11-26 00:55:44,160 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-26 00:55:44,161 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-26 00:55:44,163 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-26 00:55:44,163 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-26 00:55:44,167 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-26 00:55:44,167 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,169 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@31b207e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44, skipping insertion in model container [2022-11-26 00:55:44,169 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,177 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-26 00:55:44,211 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-26 00:55:44,512 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-26 00:55:44,526 INFO L203 MainTranslator]: Completed pre-run [2022-11-26 00:55:44,594 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-26 00:55:44,624 INFO L208 MainTranslator]: Completed translation [2022-11-26 00:55:44,625 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44 WrapperNode [2022-11-26 00:55:44,625 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-26 00:55:44,626 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-26 00:55:44,626 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-26 00:55:44,627 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-26 00:55:44,635 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,661 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,688 INFO L138 Inliner]: procedures = 117, calls = 13, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 65 [2022-11-26 00:55:44,690 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-26 00:55:44,690 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-26 00:55:44,691 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-26 00:55:44,691 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-26 00:55:44,699 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,700 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,714 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,714 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,719 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,722 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,723 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,724 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,726 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-26 00:55:44,727 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-26 00:55:44,727 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-26 00:55:44,727 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-26 00:55:44,728 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (1/1) ... [2022-11-26 00:55:44,735 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-26 00:55:44,747 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:55:44,759 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-26 00:55:44,784 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-26 00:55:44,807 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-26 00:55:44,807 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-26 00:55:44,807 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-26 00:55:44,808 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-26 00:55:44,808 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-26 00:55:44,808 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-26 00:55:44,933 INFO L235 CfgBuilder]: Building ICFG [2022-11-26 00:55:44,935 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-26 00:55:45,148 INFO L276 CfgBuilder]: Performing block encoding [2022-11-26 00:55:45,219 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-26 00:55:45,219 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-26 00:55:45,221 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:55:45 BoogieIcfgContainer [2022-11-26 00:55:45,222 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-26 00:55:45,225 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-26 00:55:45,225 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-26 00:55:45,229 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-26 00:55:45,233 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 12:55:44" (1/3) ... [2022-11-26 00:55:45,234 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24847781 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 12:55:45, skipping insertion in model container [2022-11-26 00:55:45,234 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:55:44" (2/3) ... [2022-11-26 00:55:45,235 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24847781 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 12:55:45, skipping insertion in model container [2022-11-26 00:55:45,235 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:55:45" (3/3) ... [2022-11-26 00:55:45,236 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrcpy-alloca-2.i [2022-11-26 00:55:45,264 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-26 00:55:45,266 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 9 error locations. [2022-11-26 00:55:45,316 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-26 00:55:45,322 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@42b875d8, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-26 00:55:45,323 INFO L358 AbstractCegarLoop]: Starting to check reachability of 9 error locations. [2022-11-26 00:55:45,326 INFO L276 IsEmpty]: Start isEmpty. Operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-26 00:55:45,333 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:45,333 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-26 00:55:45,334 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:45,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:45,339 INFO L85 PathProgramCache]: Analyzing trace with hash 105340, now seen corresponding path program 1 times [2022-11-26 00:55:45,348 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:45,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [183258579] [2022-11-26 00:55:45,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:45,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:45,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:45,500 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:45,500 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:45,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [183258579] [2022-11-26 00:55:45,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [183258579] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:45,502 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:45,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-26 00:55:45,503 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716146289] [2022-11-26 00:55:45,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:45,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-26 00:55:45,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:45,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-26 00:55:45,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:55:45,542 INFO L87 Difference]: Start difference. First operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:45,594 INFO L93 Difference]: Finished difference Result 21 states and 23 transitions. [2022-11-26 00:55:45,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-26 00:55:45,609 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-26 00:55:45,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:45,616 INFO L225 Difference]: With dead ends: 21 [2022-11-26 00:55:45,630 INFO L226 Difference]: Without dead ends: 19 [2022-11-26 00:55:45,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:55:45,635 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:45,636 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 20 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:45,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-26 00:55:45,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-26 00:55:45,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 10 states have (on average 2.0) internal successors, (20), 18 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2022-11-26 00:55:45,668 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 3 [2022-11-26 00:55:45,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:45,668 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2022-11-26 00:55:45,669 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,669 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2022-11-26 00:55:45,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-26 00:55:45,669 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:45,669 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-26 00:55:45,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-26 00:55:45,670 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:45,670 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:45,671 INFO L85 PathProgramCache]: Analyzing trace with hash 3267810, now seen corresponding path program 1 times [2022-11-26 00:55:45,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:45,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355000110] [2022-11-26 00:55:45,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:45,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:45,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:45,804 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:45,804 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:45,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355000110] [2022-11-26 00:55:45,805 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355000110] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:45,805 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:45,805 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-26 00:55:45,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [275913108] [2022-11-26 00:55:45,805 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:45,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-26 00:55:45,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:45,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-26 00:55:45,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:55:45,808 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:45,844 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-11-26 00:55:45,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-26 00:55:45,845 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-26 00:55:45,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:45,846 INFO L225 Difference]: With dead ends: 17 [2022-11-26 00:55:45,846 INFO L226 Difference]: Without dead ends: 17 [2022-11-26 00:55:45,846 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:55:45,848 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 13 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:45,849 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 6 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:45,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-11-26 00:55:45,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2022-11-26 00:55:45,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 10 states have (on average 1.8) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2022-11-26 00:55:45,852 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 4 [2022-11-26 00:55:45,852 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:45,852 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2022-11-26 00:55:45,853 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:45,853 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2022-11-26 00:55:45,853 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-26 00:55:45,853 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:45,853 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-26 00:55:45,854 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-26 00:55:45,854 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:45,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:45,855 INFO L85 PathProgramCache]: Analyzing trace with hash 3267811, now seen corresponding path program 1 times [2022-11-26 00:55:45,855 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:45,855 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658858815] [2022-11-26 00:55:45,855 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:45,855 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:45,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:46,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:46,376 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:46,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [658858815] [2022-11-26 00:55:46,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [658858815] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:46,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:46,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:55:46,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291960792] [2022-11-26 00:55:46,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:46,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-26 00:55:46,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:46,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-26 00:55:46,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:55:46,379 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:46,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:46,472 INFO L93 Difference]: Finished difference Result 31 states and 33 transitions. [2022-11-26 00:55:46,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-26 00:55:46,473 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-26 00:55:46,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:46,475 INFO L225 Difference]: With dead ends: 31 [2022-11-26 00:55:46,476 INFO L226 Difference]: Without dead ends: 31 [2022-11-26 00:55:46,477 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:55:46,484 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 41 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:46,486 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 8 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:55:46,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-26 00:55:46,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 19. [2022-11-26 00:55:46,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 12 states have (on average 1.75) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:46,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2022-11-26 00:55:46,494 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 4 [2022-11-26 00:55:46,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:46,495 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2022-11-26 00:55:46,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:46,495 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2022-11-26 00:55:46,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-26 00:55:46,496 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:46,496 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-26 00:55:46,496 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-26 00:55:46,496 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:46,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:46,500 INFO L85 PathProgramCache]: Analyzing trace with hash 3266345, now seen corresponding path program 1 times [2022-11-26 00:55:46,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:46,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2114256149] [2022-11-26 00:55:46,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:46,501 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:46,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:46,805 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:46,805 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:46,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2114256149] [2022-11-26 00:55:46,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2114256149] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:46,806 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:46,806 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:55:46,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1722397402] [2022-11-26 00:55:46,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:46,807 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-26 00:55:46,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:46,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-26 00:55:46,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:55:46,810 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:46,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:46,892 INFO L93 Difference]: Finished difference Result 30 states and 32 transitions. [2022-11-26 00:55:46,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-26 00:55:46,892 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-26 00:55:46,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:46,893 INFO L225 Difference]: With dead ends: 30 [2022-11-26 00:55:46,893 INFO L226 Difference]: Without dead ends: 30 [2022-11-26 00:55:46,894 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-26 00:55:46,899 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 30 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:46,905 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 13 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:55:46,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-26 00:55:46,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 20. [2022-11-26 00:55:46,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 13 states have (on average 1.6923076923076923) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:46,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-11-26 00:55:46,912 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 4 [2022-11-26 00:55:46,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:46,912 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-11-26 00:55:46,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:46,912 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-11-26 00:55:46,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-26 00:55:46,913 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:46,913 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-26 00:55:46,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-26 00:55:46,914 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:46,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:46,914 INFO L85 PathProgramCache]: Analyzing trace with hash 101303240, now seen corresponding path program 1 times [2022-11-26 00:55:46,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:46,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [793883180] [2022-11-26 00:55:46,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:46,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:46,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:46,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:46,975 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:46,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [793883180] [2022-11-26 00:55:46,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [793883180] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:46,976 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:46,976 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-26 00:55:46,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268520806] [2022-11-26 00:55:46,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:46,977 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-26 00:55:46,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:46,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-26 00:55:46,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:55:46,979 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:47,001 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-11-26 00:55:47,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-26 00:55:47,002 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-26 00:55:47,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:47,002 INFO L225 Difference]: With dead ends: 19 [2022-11-26 00:55:47,002 INFO L226 Difference]: Without dead ends: 19 [2022-11-26 00:55:47,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:55:47,004 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 6 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:47,004 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 10 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:47,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-26 00:55:47,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-26 00:55:47,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 13 states have (on average 1.6153846153846154) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2022-11-26 00:55:47,007 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 5 [2022-11-26 00:55:47,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:47,008 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2022-11-26 00:55:47,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,008 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2022-11-26 00:55:47,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-26 00:55:47,009 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:47,009 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-26 00:55:47,009 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-26 00:55:47,010 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:47,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:47,010 INFO L85 PathProgramCache]: Analyzing trace with hash 101303241, now seen corresponding path program 1 times [2022-11-26 00:55:47,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:47,011 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850007315] [2022-11-26 00:55:47,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:47,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:47,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:47,090 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:47,090 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:47,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850007315] [2022-11-26 00:55:47,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850007315] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:47,091 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:47,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:55:47,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655430069] [2022-11-26 00:55:47,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:47,092 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-26 00:55:47,092 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:47,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-26 00:55:47,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-26 00:55:47,093 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:47,133 INFO L93 Difference]: Finished difference Result 27 states and 29 transitions. [2022-11-26 00:55:47,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-26 00:55:47,134 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-26 00:55:47,134 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:47,135 INFO L225 Difference]: With dead ends: 27 [2022-11-26 00:55:47,135 INFO L226 Difference]: Without dead ends: 27 [2022-11-26 00:55:47,135 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:55:47,136 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 29 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:47,136 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 10 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:47,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-11-26 00:55:47,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 20. [2022-11-26 00:55:47,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 14 states have (on average 1.5714285714285714) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-11-26 00:55:47,140 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 5 [2022-11-26 00:55:47,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:47,140 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-11-26 00:55:47,140 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,141 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-11-26 00:55:47,141 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-26 00:55:47,141 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:47,141 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-26 00:55:47,142 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-26 00:55:47,142 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:47,142 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:47,143 INFO L85 PathProgramCache]: Analyzing trace with hash -1154566839, now seen corresponding path program 1 times [2022-11-26 00:55:47,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:47,143 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [123606475] [2022-11-26 00:55:47,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:47,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:47,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:47,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:47,264 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:47,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [123606475] [2022-11-26 00:55:47,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [123606475] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:47,265 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:47,265 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:55:47,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677565199] [2022-11-26 00:55:47,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:47,266 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-26 00:55:47,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:47,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-26 00:55:47,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-26 00:55:47,272 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:47,313 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-11-26 00:55:47,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-26 00:55:47,314 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-26 00:55:47,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:47,314 INFO L225 Difference]: With dead ends: 19 [2022-11-26 00:55:47,315 INFO L226 Difference]: Without dead ends: 19 [2022-11-26 00:55:47,315 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:55:47,316 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 15 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:47,316 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 6 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:47,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-26 00:55:47,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-26 00:55:47,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 14 states have (on average 1.5) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2022-11-26 00:55:47,321 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 6 [2022-11-26 00:55:47,321 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:47,321 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2022-11-26 00:55:47,321 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,322 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2022-11-26 00:55:47,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-26 00:55:47,322 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:47,322 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-26 00:55:47,322 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-26 00:55:47,323 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:47,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:47,324 INFO L85 PathProgramCache]: Analyzing trace with hash -1154566838, now seen corresponding path program 1 times [2022-11-26 00:55:47,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:47,325 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498309822] [2022-11-26 00:55:47,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:47,325 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:47,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:47,544 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:47,545 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:47,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498309822] [2022-11-26 00:55:47,545 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498309822] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:47,545 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:47,545 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:55:47,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1274039380] [2022-11-26 00:55:47,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:47,547 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-26 00:55:47,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:47,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-26 00:55:47,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:55:47,548 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:47,631 INFO L93 Difference]: Finished difference Result 24 states and 26 transitions. [2022-11-26 00:55:47,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-26 00:55:47,632 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-26 00:55:47,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:47,635 INFO L225 Difference]: With dead ends: 24 [2022-11-26 00:55:47,635 INFO L226 Difference]: Without dead ends: 24 [2022-11-26 00:55:47,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-26 00:55:47,637 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 44 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:47,638 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 6 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:47,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-11-26 00:55:47,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 20. [2022-11-26 00:55:47,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 15 states have (on average 1.4666666666666666) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-11-26 00:55:47,648 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 6 [2022-11-26 00:55:47,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:47,648 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-11-26 00:55:47,649 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:47,649 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-11-26 00:55:47,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-26 00:55:47,649 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:47,650 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-26 00:55:47,650 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-26 00:55:47,650 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:47,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:47,651 INFO L85 PathProgramCache]: Analyzing trace with hash -1155970900, now seen corresponding path program 1 times [2022-11-26 00:55:47,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:47,651 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498633706] [2022-11-26 00:55:47,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:47,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:47,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:47,995 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:47,996 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:47,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498633706] [2022-11-26 00:55:47,996 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498633706] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:55:47,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [199977785] [2022-11-26 00:55:47,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:47,997 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:47,997 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:55:48,003 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:55:48,019 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-26 00:55:48,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:48,078 INFO L263 TraceCheckSpWp]: Trace formula consists of 66 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-26 00:55:48,084 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:55:48,162 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-26 00:55:48,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-26 00:55:48,332 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:48,332 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:55:48,567 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:48,568 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [199977785] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:55:48,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1774547195] [2022-11-26 00:55:48,603 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-26 00:55:48,603 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:55:48,607 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:55:48,613 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:55:48,614 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:55:48,704 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:55:48,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:55:48,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:55:48,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:48,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:49,030 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:55:49,571 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '450#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length2~0#1|)) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|))) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:55:49,571 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:55:49,572 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:55:49,572 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 13 [2022-11-26 00:55:49,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [278708108] [2022-11-26 00:55:49,572 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:55:49,573 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-26 00:55:49,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:49,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-26 00:55:49,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=74, Invalid=268, Unknown=0, NotChecked=0, Total=342 [2022-11-26 00:55:49,574 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:50,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:50,054 INFO L93 Difference]: Finished difference Result 29 states and 31 transitions. [2022-11-26 00:55:50,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-26 00:55:50,055 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-26 00:55:50,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:50,055 INFO L225 Difference]: With dead ends: 29 [2022-11-26 00:55:50,056 INFO L226 Difference]: Without dead ends: 29 [2022-11-26 00:55:50,056 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 136 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=143, Invalid=507, Unknown=0, NotChecked=0, Total=650 [2022-11-26 00:55:50,057 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 97 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:50,057 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 19 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:55:50,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-26 00:55:50,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 18. [2022-11-26 00:55:50,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 14 states have (on average 1.4285714285714286) internal successors, (20), 17 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:50,060 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 20 transitions. [2022-11-26 00:55:50,060 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 20 transitions. Word has length 6 [2022-11-26 00:55:50,061 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:50,061 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 20 transitions. [2022-11-26 00:55:50,061 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:50,061 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 20 transitions. [2022-11-26 00:55:50,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-26 00:55:50,062 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:50,062 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-26 00:55:50,071 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-26 00:55:50,268 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:50,268 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:50,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:50,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1155972366, now seen corresponding path program 1 times [2022-11-26 00:55:50,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:50,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [416821772] [2022-11-26 00:55:50,270 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:50,270 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:50,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:50,504 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:50,505 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:50,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [416821772] [2022-11-26 00:55:50,505 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [416821772] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:55:50,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [905929705] [2022-11-26 00:55:50,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:50,506 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:50,506 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:55:50,507 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:55:50,527 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-26 00:55:50,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:50,577 INFO L263 TraceCheckSpWp]: Trace formula consists of 68 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-26 00:55:50,579 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:55:50,631 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-26 00:55:50,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-26 00:55:50,784 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:50,784 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:55:50,917 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:50,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [905929705] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:55:50,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2075684922] [2022-11-26 00:55:50,920 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-26 00:55:50,920 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:55:50,920 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:55:50,920 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:55:50,920 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:55:50,966 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:55:50,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:55:51,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:51,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:51,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:51,133 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:55:51,529 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '560#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet10#1| 127) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet10#1|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (not (<= (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset| 1) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|))) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:55:51,529 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:55:51,529 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:55:51,529 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-26 00:55:51,529 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1255040925] [2022-11-26 00:55:51,530 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:55:51,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-26 00:55:51,530 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:51,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-26 00:55:51,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=231, Unknown=0, NotChecked=0, Total=306 [2022-11-26 00:55:51,531 INFO L87 Difference]: Start difference. First operand 18 states and 20 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:51,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:51,804 INFO L93 Difference]: Finished difference Result 40 states and 43 transitions. [2022-11-26 00:55:51,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-26 00:55:51,806 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-26 00:55:51,806 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:51,806 INFO L225 Difference]: With dead ends: 40 [2022-11-26 00:55:51,807 INFO L226 Difference]: Without dead ends: 40 [2022-11-26 00:55:51,807 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=110, Invalid=310, Unknown=0, NotChecked=0, Total=420 [2022-11-26 00:55:51,808 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 51 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:51,808 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 26 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:55:51,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-11-26 00:55:51,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 15. [2022-11-26 00:55:51,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 12 states have (on average 1.3333333333333333) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:51,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-26 00:55:51,810 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 6 [2022-11-26 00:55:51,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:51,811 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-26 00:55:51,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:51,811 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-26 00:55:51,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-26 00:55:51,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:51,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:55:51,822 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-26 00:55:52,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:52,012 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:52,013 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:52,013 INFO L85 PathProgramCache]: Analyzing trace with hash -1437168687, now seen corresponding path program 1 times [2022-11-26 00:55:52,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:52,013 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803562744] [2022-11-26 00:55:52,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:52,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:52,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:52,199 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:52,199 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:52,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803562744] [2022-11-26 00:55:52,199 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803562744] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:52,199 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:52,200 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-26 00:55:52,200 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [661612770] [2022-11-26 00:55:52,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:52,200 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-26 00:55:52,200 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:52,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-26 00:55:52,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-26 00:55:52,201 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:52,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:52,276 INFO L93 Difference]: Finished difference Result 24 states and 25 transitions. [2022-11-26 00:55:52,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-26 00:55:52,277 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-26 00:55:52,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:52,278 INFO L225 Difference]: With dead ends: 24 [2022-11-26 00:55:52,278 INFO L226 Difference]: Without dead ends: 24 [2022-11-26 00:55:52,278 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-26 00:55:52,279 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 18 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:52,279 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 24 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:52,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-11-26 00:55:52,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 20. [2022-11-26 00:55:52,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:52,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-11-26 00:55:52,286 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 8 [2022-11-26 00:55:52,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:52,286 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-11-26 00:55:52,286 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:52,286 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-11-26 00:55:52,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-26 00:55:52,287 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:52,287 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:55:52,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-26 00:55:52,288 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:52,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:52,288 INFO L85 PathProgramCache]: Analyzing trace with hash -1602571835, now seen corresponding path program 1 times [2022-11-26 00:55:52,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:52,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038273829] [2022-11-26 00:55:52,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:52,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:52,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:52,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:52,453 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:52,453 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038273829] [2022-11-26 00:55:52,453 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038273829] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:55:52,454 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:55:52,454 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-26 00:55:52,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1215211018] [2022-11-26 00:55:52,454 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:55:52,454 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-26 00:55:52,455 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:52,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-26 00:55:52,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-26 00:55:52,455 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:52,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:52,478 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-11-26 00:55:52,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-26 00:55:52,479 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-26 00:55:52,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:52,479 INFO L225 Difference]: With dead ends: 19 [2022-11-26 00:55:52,479 INFO L226 Difference]: Without dead ends: 13 [2022-11-26 00:55:52,479 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-26 00:55:52,480 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 5 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:52,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 8 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-26 00:55:52,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13 states. [2022-11-26 00:55:52,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13 to 13. [2022-11-26 00:55:52,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 11 states have (on average 1.2727272727272727) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:52,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 14 transitions. [2022-11-26 00:55:52,483 INFO L78 Accepts]: Start accepts. Automaton has 13 states and 14 transitions. Word has length 9 [2022-11-26 00:55:52,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:52,483 INFO L495 AbstractCegarLoop]: Abstraction has 13 states and 14 transitions. [2022-11-26 00:55:52,483 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:52,483 INFO L276 IsEmpty]: Start isEmpty. Operand 13 states and 14 transitions. [2022-11-26 00:55:52,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-26 00:55:52,484 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:52,484 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:55:52,484 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-26 00:55:52,484 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:52,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:52,485 INFO L85 PathProgramCache]: Analyzing trace with hash -2002719974, now seen corresponding path program 1 times [2022-11-26 00:55:52,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:52,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [721190332] [2022-11-26 00:55:52,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:52,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:52,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:52,703 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:52,703 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:52,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [721190332] [2022-11-26 00:55:52,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [721190332] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:55:52,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2009732737] [2022-11-26 00:55:52,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:52,704 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:52,704 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:55:52,705 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:55:52,735 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-26 00:55:52,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:52,790 INFO L263 TraceCheckSpWp]: Trace formula consists of 117 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-26 00:55:52,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:55:52,857 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:52,858 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:55:52,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 00:55:52,952 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:52,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2009732737] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:55:52,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [592423172] [2022-11-26 00:55:52,954 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:55:52,955 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:55:52,955 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:55:52,955 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:55:52,955 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:55:53,000 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:55:53,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:55:53,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:55:53,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:53,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:53,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:53,260 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:55:53,286 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:55:53,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:55:53,545 INFO L321 Elim1Store]: treesize reduction 169, result has 12.9 percent of original size [2022-11-26 00:55:53,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 214 treesize of output 209 [2022-11-26 00:55:53,696 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:55:53,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:55:53,760 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:55:53,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:55:53,776 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:55:54,640 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '785#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:55:54,640 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:55:54,640 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:55:54,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 13 [2022-11-26 00:55:54,641 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186974213] [2022-11-26 00:55:54,641 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:55:54,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-26 00:55:54,641 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:54,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-26 00:55:54,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=79, Invalid=383, Unknown=0, NotChecked=0, Total=462 [2022-11-26 00:55:54,642 INFO L87 Difference]: Start difference. First operand 13 states and 14 transitions. Second operand has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:54,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:54,792 INFO L93 Difference]: Finished difference Result 19 states and 20 transitions. [2022-11-26 00:55:54,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-26 00:55:54,792 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-26 00:55:54,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:54,793 INFO L225 Difference]: With dead ends: 19 [2022-11-26 00:55:54,793 INFO L226 Difference]: Without dead ends: 19 [2022-11-26 00:55:54,793 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 179 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=114, Invalid=536, Unknown=0, NotChecked=0, Total=650 [2022-11-26 00:55:54,794 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 48 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:54,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 1 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:55:54,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-26 00:55:54,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 15. [2022-11-26 00:55:54,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:54,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-11-26 00:55:54,796 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 10 [2022-11-26 00:55:54,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:54,797 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-11-26 00:55:54,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:54,797 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-11-26 00:55:54,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-26 00:55:54,797 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:54,797 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:55:54,812 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-26 00:55:54,998 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-26 00:55:54,998 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:54,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:54,999 INFO L85 PathProgramCache]: Analyzing trace with hash -1954777063, now seen corresponding path program 1 times [2022-11-26 00:55:54,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:54,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [528915819] [2022-11-26 00:55:54,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:54,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:55,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:55,332 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:55,332 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:55,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [528915819] [2022-11-26 00:55:55,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [528915819] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:55:55,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1970050418] [2022-11-26 00:55:55,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:55,333 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:55,333 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:55:55,334 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:55:55,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-26 00:55:55,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:55,431 INFO L263 TraceCheckSpWp]: Trace formula consists of 123 conjuncts, 43 conjunts are in the unsatisfiable core [2022-11-26 00:55:55,433 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:55:55,480 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:55:55,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 00:55:55,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:55:55,721 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:55,721 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:55:55,917 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:55:55,952 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:55,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1970050418] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:55:55,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [254373145] [2022-11-26 00:55:55,955 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:55:55,956 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:55:55,956 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:55:55,956 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:55:55,956 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:55:56,024 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:55:56,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:55:56,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:55:56,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:56,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:56,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:56,311 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:55:56,336 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:55:56,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:55:56,468 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:55:56,555 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-11-26 00:55:56,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-11-26 00:55:56,838 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:55:56,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:55:56,902 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:55:56,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:55:56,926 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:55:57,892 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '915#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:55:57,892 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:55:57,892 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:55:57,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 6] total 18 [2022-11-26 00:55:57,893 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309050817] [2022-11-26 00:55:57,893 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:55:57,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-26 00:55:57,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:55:57,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-26 00:55:57,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=637, Unknown=0, NotChecked=0, Total=756 [2022-11-26 00:55:57,895 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:58,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:55:58,425 INFO L93 Difference]: Finished difference Result 18 states and 19 transitions. [2022-11-26 00:55:58,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-26 00:55:58,425 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-26 00:55:58,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:55:58,425 INFO L225 Difference]: With dead ends: 18 [2022-11-26 00:55:58,425 INFO L226 Difference]: Without dead ends: 18 [2022-11-26 00:55:58,426 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=209, Invalid=981, Unknown=0, NotChecked=0, Total=1190 [2022-11-26 00:55:58,426 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 60 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:55:58,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 0 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:55:58,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2022-11-26 00:55:58,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 16. [2022-11-26 00:55:58,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:58,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-11-26 00:55:58,428 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 11 [2022-11-26 00:55:58,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:55:58,429 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-11-26 00:55:58,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:55:58,429 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-11-26 00:55:58,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-26 00:55:58,429 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:55:58,429 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:55:58,440 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-26 00:55:58,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-26 00:55:58,636 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:55:58,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:55:58,636 INFO L85 PathProgramCache]: Analyzing trace with hash -1640048928, now seen corresponding path program 2 times [2022-11-26 00:55:58,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:55:58,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [962319245] [2022-11-26 00:55:58,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:55:58,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:55:58,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:55:59,090 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:59,090 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:55:59,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [962319245] [2022-11-26 00:55:59,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [962319245] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:55:59,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1750765014] [2022-11-26 00:55:59,091 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:55:59,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:55:59,093 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:55:59,094 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:55:59,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-26 00:55:59,189 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-26 00:55:59,189 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:55:59,191 INFO L263 TraceCheckSpWp]: Trace formula consists of 140 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-26 00:55:59,193 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:55:59,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:55:59,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:59,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:55:59,462 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-26 00:55:59,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-26 00:55:59,481 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:55:59,481 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:55:59,531 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_173 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_173) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)))) is different from false [2022-11-26 00:55:59,556 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:55:59,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:55:59,577 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:55:59,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:55:59,730 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-26 00:55:59,731 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1750765014] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:55:59,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [29817087] [2022-11-26 00:55:59,733 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:55:59,733 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:55:59,733 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:55:59,733 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:55:59,734 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:55:59,783 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:55:59,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:55:59,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:55:59,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:55:59,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:00,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:00,072 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:00,105 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:00,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:00,341 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-11-26 00:56:00,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 222 treesize of output 233 [2022-11-26 00:56:00,732 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:00,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:00,793 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:00,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:00,805 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:01,787 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1066#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:01,787 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:01,787 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:01,787 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 23 [2022-11-26 00:56:01,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1819522927] [2022-11-26 00:56:01,787 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:01,788 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-26 00:56:01,788 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:01,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-26 00:56:01,789 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=772, Unknown=1, NotChecked=56, Total=930 [2022-11-26 00:56:01,789 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 23 states, 23 states have (on average 1.391304347826087) internal successors, (32), 23 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:02,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:02,191 INFO L93 Difference]: Finished difference Result 26 states and 27 transitions. [2022-11-26 00:56:02,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-26 00:56:02,193 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 1.391304347826087) internal successors, (32), 23 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-26 00:56:02,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:02,194 INFO L225 Difference]: With dead ends: 26 [2022-11-26 00:56:02,194 INFO L226 Difference]: Without dead ends: 19 [2022-11-26 00:56:02,194 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 16 SyntacticMatches, 3 SemanticMatches, 36 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 369 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=175, Invalid=1160, Unknown=1, NotChecked=70, Total=1406 [2022-11-26 00:56:02,195 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 28 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 17 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:02,195 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 39 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 136 Invalid, 0 Unknown, 17 Unchecked, 0.1s Time] [2022-11-26 00:56:02,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-26 00:56:02,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 18. [2022-11-26 00:56:02,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 16 states have (on average 1.1875) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:02,197 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-11-26 00:56:02,197 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 13 [2022-11-26 00:56:02,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:02,197 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-11-26 00:56:02,197 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 1.391304347826087) internal successors, (32), 23 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:02,197 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-11-26 00:56:02,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-26 00:56:02,198 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:02,198 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2022-11-26 00:56:02,207 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:02,407 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:02,407 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:02,408 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:02,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1222009545, now seen corresponding path program 3 times [2022-11-26 00:56:02,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:02,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [645654026] [2022-11-26 00:56:02,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:02,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:02,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:02,725 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:02,726 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:02,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [645654026] [2022-11-26 00:56:02,726 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [645654026] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:02,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1184661368] [2022-11-26 00:56:02,726 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:56:02,726 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:02,726 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:02,727 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:02,755 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-26 00:56:02,826 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:56:02,826 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:02,828 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-26 00:56:02,831 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:02,846 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:56:02,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:56:02,940 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:02,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:03,119 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:03,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1184661368] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:03,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1715106903] [2022-11-26 00:56:03,121 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:03,121 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:03,121 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:03,121 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:03,122 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:03,157 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:03,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:03,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:03,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:03,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:03,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:03,373 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:03,407 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:03,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:03,644 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-11-26 00:56:03,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 228 [2022-11-26 00:56:03,865 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:03,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:03,930 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:03,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:03,941 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:04,841 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1237#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:04,841 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:04,841 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:04,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 19 [2022-11-26 00:56:04,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1564138810] [2022-11-26 00:56:04,842 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:04,842 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-26 00:56:04,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:04,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-26 00:56:04,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=110, Invalid=646, Unknown=0, NotChecked=0, Total=756 [2022-11-26 00:56:04,844 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:05,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:05,079 INFO L93 Difference]: Finished difference Result 23 states and 24 transitions. [2022-11-26 00:56:05,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-26 00:56:05,081 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-26 00:56:05,081 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:05,081 INFO L225 Difference]: With dead ends: 23 [2022-11-26 00:56:05,082 INFO L226 Difference]: Without dead ends: 23 [2022-11-26 00:56:05,082 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 240 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=180, Invalid=876, Unknown=0, NotChecked=0, Total=1056 [2022-11-26 00:56:05,083 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 57 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:05,083 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 1 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:56:05,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2022-11-26 00:56:05,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 20. [2022-11-26 00:56:05,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 18 states have (on average 1.1666666666666667) internal successors, (21), 19 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:05,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 21 transitions. [2022-11-26 00:56:05,086 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 21 transitions. Word has length 15 [2022-11-26 00:56:05,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:05,086 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 21 transitions. [2022-11-26 00:56:05,086 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:05,086 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 21 transitions. [2022-11-26 00:56:05,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-26 00:56:05,087 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:05,087 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2022-11-26 00:56:05,097 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:05,297 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-26 00:56:05,297 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:05,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:05,298 INFO L85 PathProgramCache]: Analyzing trace with hash 772409756, now seen corresponding path program 2 times [2022-11-26 00:56:05,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:05,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860224220] [2022-11-26 00:56:05,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:05,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:05,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:05,719 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:05,720 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:05,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860224220] [2022-11-26 00:56:05,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860224220] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:05,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [381126790] [2022-11-26 00:56:05,721 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:56:05,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:05,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:05,723 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:05,747 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-26 00:56:05,957 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-26 00:56:05,957 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:05,959 INFO L263 TraceCheckSpWp]: Trace formula consists of 159 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-26 00:56:05,961 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:06,019 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:06,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:56:06,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:06,282 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:06,282 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:06,574 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:06,609 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 4 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:06,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [381126790] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:06,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1734409141] [2022-11-26 00:56:06,613 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:06,613 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:06,613 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:06,613 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:06,614 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:06,652 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:06,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:06,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:06,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:06,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:06,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:06,876 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:06,907 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:06,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:07,185 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-11-26 00:56:07,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 215 treesize of output 228 [2022-11-26 00:56:07,546 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:07,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:07,604 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:07,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:07,620 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:08,759 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1415#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:08,759 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:08,759 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:08,759 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 8] total 25 [2022-11-26 00:56:08,759 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662089667] [2022-11-26 00:56:08,760 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:08,760 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-26 00:56:08,760 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:08,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-26 00:56:08,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=136, Invalid=1054, Unknown=0, NotChecked=0, Total=1190 [2022-11-26 00:56:08,762 INFO L87 Difference]: Start difference. First operand 20 states and 21 transitions. Second operand has 27 states, 26 states have (on average 1.8461538461538463) internal successors, (48), 26 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:09,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:09,454 INFO L93 Difference]: Finished difference Result 22 states and 23 transitions. [2022-11-26 00:56:09,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-26 00:56:09,454 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 1.8461538461538463) internal successors, (48), 26 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-26 00:56:09,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:09,454 INFO L225 Difference]: With dead ends: 22 [2022-11-26 00:56:09,454 INFO L226 Difference]: Without dead ends: 22 [2022-11-26 00:56:09,455 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=277, Invalid=1615, Unknown=0, NotChecked=0, Total=1892 [2022-11-26 00:56:09,456 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 107 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:09,456 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 0 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:56:09,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2022-11-26 00:56:09,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 21. [2022-11-26 00:56:09,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 19 states have (on average 1.1578947368421053) internal successors, (22), 20 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:09,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 22 transitions. [2022-11-26 00:56:09,458 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 22 transitions. Word has length 16 [2022-11-26 00:56:09,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:09,458 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 22 transitions. [2022-11-26 00:56:09,458 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 1.8461538461538463) internal successors, (48), 26 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:09,458 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 22 transitions. [2022-11-26 00:56:09,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-26 00:56:09,459 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:09,459 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 1, 1, 1, 1, 1] [2022-11-26 00:56:09,476 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:09,676 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-26 00:56:09,676 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:09,676 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:09,676 INFO L85 PathProgramCache]: Analyzing trace with hash -743566429, now seen corresponding path program 4 times [2022-11-26 00:56:09,677 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:09,677 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679966837] [2022-11-26 00:56:09,677 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:09,677 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:09,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:10,083 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:10,084 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:10,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679966837] [2022-11-26 00:56:10,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1679966837] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:10,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [463513573] [2022-11-26 00:56:10,084 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:56:10,084 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:10,084 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:10,087 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:10,089 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-26 00:56:10,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:10,190 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-26 00:56:10,194 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:10,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:10,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:10,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:56:10,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:56:10,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:56:10,448 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:10,448 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:10,507 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_278 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_278) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 00:56:10,532 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:10,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:56:10,540 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:10,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:56:10,672 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 6 not checked. [2022-11-26 00:56:10,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [463513573] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:10,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [402216987] [2022-11-26 00:56:10,675 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:10,675 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:10,675 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:10,675 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:10,676 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:10,707 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:10,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:10,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:10,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:10,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:10,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:10,938 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:10,971 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:10,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:11,092 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:11,176 INFO L321 Elim1Store]: treesize reduction 163, result has 22.7 percent of original size [2022-11-26 00:56:11,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-11-26 00:56:11,320 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:11,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:11,379 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:11,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:11,390 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:12,344 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1608#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:12,345 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:12,345 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:12,345 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 22 [2022-11-26 00:56:12,345 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1967925422] [2022-11-26 00:56:12,345 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:12,346 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-26 00:56:12,346 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:12,347 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-26 00:56:12,347 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=89, Invalid=716, Unknown=11, NotChecked=54, Total=870 [2022-11-26 00:56:12,347 INFO L87 Difference]: Start difference. First operand 21 states and 22 transitions. Second operand has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:12,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:12,739 INFO L93 Difference]: Finished difference Result 34 states and 35 transitions. [2022-11-26 00:56:12,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-26 00:56:12,740 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-26 00:56:12,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:12,740 INFO L225 Difference]: With dead ends: 34 [2022-11-26 00:56:12,740 INFO L226 Difference]: Without dead ends: 24 [2022-11-26 00:56:12,741 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 34 SyntacticMatches, 3 SemanticMatches, 35 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=157, Invalid=1096, Unknown=11, NotChecked=68, Total=1332 [2022-11-26 00:56:12,741 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 42 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 20 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:12,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 35 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 233 Invalid, 0 Unknown, 20 Unchecked, 0.2s Time] [2022-11-26 00:56:12,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-11-26 00:56:12,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 23. [2022-11-26 00:56:12,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 21 states have (on average 1.1428571428571428) internal successors, (24), 22 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:12,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 24 transitions. [2022-11-26 00:56:12,743 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 24 transitions. Word has length 18 [2022-11-26 00:56:12,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:12,744 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 24 transitions. [2022-11-26 00:56:12,744 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:12,744 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 24 transitions. [2022-11-26 00:56:12,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-26 00:56:12,744 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:12,744 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2022-11-26 00:56:12,751 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:12,950 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-26 00:56:12,951 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:12,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:12,951 INFO L85 PathProgramCache]: Analyzing trace with hash 822389676, now seen corresponding path program 5 times [2022-11-26 00:56:12,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:12,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1130509371] [2022-11-26 00:56:12,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:12,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:12,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:13,262 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:13,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:13,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1130509371] [2022-11-26 00:56:13,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1130509371] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:13,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [299825426] [2022-11-26 00:56:13,263 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:56:13,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:13,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:13,264 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:13,299 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-26 00:56:13,428 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-26 00:56:13,428 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:13,430 INFO L263 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-26 00:56:13,431 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:13,445 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:56:13,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:56:13,611 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:13,612 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:13,891 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:13,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [299825426] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:13,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [171189573] [2022-11-26 00:56:13,893 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:13,893 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:13,893 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:13,893 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:13,893 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:13,921 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:13,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:13,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:14,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:14,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:14,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:14,134 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:14,157 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:14,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:14,256 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:14,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:14,334 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:14,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:14,348 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:15,278 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1829#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:15,278 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:15,278 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:15,278 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 27 [2022-11-26 00:56:15,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702518703] [2022-11-26 00:56:15,279 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:15,279 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-26 00:56:15,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:15,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-26 00:56:15,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=1093, Unknown=0, NotChecked=0, Total=1260 [2022-11-26 00:56:15,281 INFO L87 Difference]: Start difference. First operand 23 states and 24 transitions. Second operand has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:15,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:15,588 INFO L93 Difference]: Finished difference Result 28 states and 29 transitions. [2022-11-26 00:56:15,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-26 00:56:15,589 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-26 00:56:15,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:15,589 INFO L225 Difference]: With dead ends: 28 [2022-11-26 00:56:15,589 INFO L226 Difference]: Without dead ends: 28 [2022-11-26 00:56:15,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 472 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=284, Invalid=1438, Unknown=0, NotChecked=0, Total=1722 [2022-11-26 00:56:15,590 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 126 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 186 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:15,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 1 Invalid, 186 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:56:15,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2022-11-26 00:56:15,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 25. [2022-11-26 00:56:15,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 23 states have (on average 1.1304347826086956) internal successors, (26), 24 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:15,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 26 transitions. [2022-11-26 00:56:15,593 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 26 transitions. Word has length 20 [2022-11-26 00:56:15,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:15,593 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 26 transitions. [2022-11-26 00:56:15,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:15,593 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 26 transitions. [2022-11-26 00:56:15,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-26 00:56:15,593 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:15,594 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2022-11-26 00:56:15,604 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:15,800 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:15,800 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:15,800 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:15,800 INFO L85 PathProgramCache]: Analyzing trace with hash -275723833, now seen corresponding path program 3 times [2022-11-26 00:56:15,800 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:15,800 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637195225] [2022-11-26 00:56:15,800 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:15,801 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:15,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:16,242 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:16,242 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:16,242 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637195225] [2022-11-26 00:56:16,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1637195225] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:16,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [668768734] [2022-11-26 00:56:16,243 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:56:16,243 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:16,243 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:16,244 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:16,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-26 00:56:16,363 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:56:16,363 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:16,365 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 68 conjunts are in the unsatisfiable core [2022-11-26 00:56:16,368 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:16,427 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-26 00:56:16,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-26 00:56:16,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:17,087 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:17,087 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:17,608 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:17,658 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 9 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:17,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [668768734] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:17,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1544380267] [2022-11-26 00:56:17,660 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:17,660 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:17,660 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:17,660 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:17,660 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:17,691 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:17,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:17,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:17,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:17,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:17,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:17,907 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:17,931 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:17,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:18,007 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:18,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:18,066 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:18,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:18,076 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:19,202 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2055#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:19,202 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:19,202 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:19,202 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 31 [2022-11-26 00:56:19,202 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1652532674] [2022-11-26 00:56:19,202 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:19,203 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-26 00:56:19,203 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:19,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-26 00:56:19,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1446, Unknown=0, NotChecked=0, Total=1640 [2022-11-26 00:56:19,205 INFO L87 Difference]: Start difference. First operand 25 states and 26 transitions. Second operand has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:20,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:20,073 INFO L93 Difference]: Finished difference Result 27 states and 28 transitions. [2022-11-26 00:56:20,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-26 00:56:20,074 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-26 00:56:20,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:20,074 INFO L225 Difference]: With dead ends: 27 [2022-11-26 00:56:20,074 INFO L226 Difference]: Without dead ends: 27 [2022-11-26 00:56:20,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 31 SyntacticMatches, 1 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 668 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=431, Invalid=2431, Unknown=0, NotChecked=0, Total=2862 [2022-11-26 00:56:20,076 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 125 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:20,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 0 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:56:20,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-11-26 00:56:20,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 26. [2022-11-26 00:56:20,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 24 states have (on average 1.125) internal successors, (27), 25 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:20,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 27 transitions. [2022-11-26 00:56:20,078 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 27 transitions. Word has length 21 [2022-11-26 00:56:20,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:20,078 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 27 transitions. [2022-11-26 00:56:20,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:20,078 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 27 transitions. [2022-11-26 00:56:20,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-26 00:56:20,079 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:20,079 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 1, 1, 1, 1, 1] [2022-11-26 00:56:20,090 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:20,285 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:20,285 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:20,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:20,285 INFO L85 PathProgramCache]: Analyzing trace with hash 1317369102, now seen corresponding path program 6 times [2022-11-26 00:56:20,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:20,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272721543] [2022-11-26 00:56:20,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:20,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:20,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:20,808 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:20,809 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:20,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272721543] [2022-11-26 00:56:20,809 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272721543] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:20,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1561366188] [2022-11-26 00:56:20,809 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:56:20,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:20,809 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:20,810 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:20,835 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-26 00:56:20,956 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:56:20,956 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:20,959 INFO L263 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-26 00:56:20,962 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:21,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:56:21,230 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:21,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:56:21,311 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:21,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:56:21,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:21,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:56:21,448 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:21,450 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:21,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 00:56:21,454 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:21,454 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:21,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 768 treesize of output 756 [2022-11-26 00:56:22,718 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:22,718 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1561366188] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:22,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1855081399] [2022-11-26 00:56:22,721 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:22,721 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:22,721 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:22,721 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:22,721 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:22,754 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:22,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:22,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:22,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:22,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:22,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:22,957 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:22,981 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:22,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:23,060 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:23,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:23,110 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:23,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:23,122 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:24,316 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2309#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:24,317 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:24,317 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:24,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 16] total 35 [2022-11-26 00:56:24,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2080555846] [2022-11-26 00:56:24,317 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:24,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-26 00:56:24,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:24,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-26 00:56:24,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1682, Unknown=0, NotChecked=0, Total=1806 [2022-11-26 00:56:24,319 INFO L87 Difference]: Start difference. First operand 26 states and 27 transitions. Second operand has 35 states, 35 states have (on average 1.7142857142857142) internal successors, (60), 35 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:25,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:25,238 INFO L93 Difference]: Finished difference Result 42 states and 43 transitions. [2022-11-26 00:56:25,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-26 00:56:25,239 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 1.7142857142857142) internal successors, (60), 35 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-26 00:56:25,239 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:25,240 INFO L225 Difference]: With dead ends: 42 [2022-11-26 00:56:25,240 INFO L226 Difference]: Without dead ends: 29 [2022-11-26 00:56:25,241 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 494 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=252, Invalid=2828, Unknown=0, NotChecked=0, Total=3080 [2022-11-26 00:56:25,242 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 67 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 420 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 44 SdHoareTripleChecker+Invalid, 424 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 420 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:25,242 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 44 Invalid, 424 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 420 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-26 00:56:25,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-26 00:56:25,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-11-26 00:56:25,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 26 states have (on average 1.1153846153846154) internal successors, (29), 27 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:25,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 29 transitions. [2022-11-26 00:56:25,244 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 29 transitions. Word has length 23 [2022-11-26 00:56:25,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:25,245 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 29 transitions. [2022-11-26 00:56:25,245 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 1.7142857142857142) internal successors, (60), 35 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:25,245 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 29 transitions. [2022-11-26 00:56:25,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-26 00:56:25,246 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:25,246 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 1, 1, 1, 1, 1] [2022-11-26 00:56:25,252 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:25,451 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-11-26 00:56:25,452 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:25,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:25,452 INFO L85 PathProgramCache]: Analyzing trace with hash 1189706405, now seen corresponding path program 7 times [2022-11-26 00:56:25,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:25,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211425735] [2022-11-26 00:56:25,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:25,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:25,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:25,795 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:25,796 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:25,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211425735] [2022-11-26 00:56:25,796 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211425735] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:25,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1180765103] [2022-11-26 00:56:25,796 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:56:25,796 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:25,796 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:25,798 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:25,807 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-26 00:56:25,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:25,910 INFO L263 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-26 00:56:25,912 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:26,072 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 9 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:26,073 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:26,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 00:56:26,334 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 9 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:26,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1180765103] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:26,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [927914844] [2022-11-26 00:56:26,335 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:26,336 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:26,336 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:26,336 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:26,336 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:26,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:26,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:26,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:26,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:26,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:26,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:26,566 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:26,593 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:26,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:26,679 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:26,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:26,738 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:26,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:26,749 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:27,679 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2582#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:27,679 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:27,679 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:27,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 24 [2022-11-26 00:56:27,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1252563618] [2022-11-26 00:56:27,679 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:27,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-26 00:56:27,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:27,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-26 00:56:27,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=130, Invalid=926, Unknown=0, NotChecked=0, Total=1056 [2022-11-26 00:56:27,681 INFO L87 Difference]: Start difference. First operand 28 states and 29 transitions. Second operand has 25 states, 24 states have (on average 2.2083333333333335) internal successors, (53), 25 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:27,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:27,971 INFO L93 Difference]: Finished difference Result 33 states and 34 transitions. [2022-11-26 00:56:27,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-26 00:56:27,979 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 2.2083333333333335) internal successors, (53), 25 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-26 00:56:27,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:27,980 INFO L225 Difference]: With dead ends: 33 [2022-11-26 00:56:27,980 INFO L226 Difference]: Without dead ends: 33 [2022-11-26 00:56:27,983 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 5 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=242, Invalid=1318, Unknown=0, NotChecked=0, Total=1560 [2022-11-26 00:56:27,984 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 74 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:27,984 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 3 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:56:27,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-26 00:56:27,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 30. [2022-11-26 00:56:27,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 28 states have (on average 1.1071428571428572) internal successors, (31), 29 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:27,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 31 transitions. [2022-11-26 00:56:27,988 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 31 transitions. Word has length 25 [2022-11-26 00:56:27,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:27,989 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 31 transitions. [2022-11-26 00:56:27,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 2.2083333333333335) internal successors, (53), 25 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:27,990 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 31 transitions. [2022-11-26 00:56:27,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-26 00:56:27,994 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:27,994 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 1, 1, 1, 1, 1] [2022-11-26 00:56:28,003 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-11-26 00:56:28,199 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:28,199 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:28,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:28,200 INFO L85 PathProgramCache]: Analyzing trace with hash -1773807122, now seen corresponding path program 4 times [2022-11-26 00:56:28,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:28,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326344378] [2022-11-26 00:56:28,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:28,200 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:28,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:28,783 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 38 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:28,783 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:28,783 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326344378] [2022-11-26 00:56:28,784 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326344378] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:28,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2120831797] [2022-11-26 00:56:28,784 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:56:28,784 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:28,784 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:28,785 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:28,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-26 00:56:28,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:28,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-26 00:56:28,927 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:28,980 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:28,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:56:28,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:29,422 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 9 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:29,422 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:29,931 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:29,979 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 16 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:29,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2120831797] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:29,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [575450186] [2022-11-26 00:56:29,981 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:29,981 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:29,981 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:29,981 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:29,981 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:30,030 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:30,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:30,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:30,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:30,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:30,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:30,245 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:30,268 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:30,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:30,349 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:30,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:30,405 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:30,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:30,417 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:31,588 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2855#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:31,588 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:31,588 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:31,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 36 [2022-11-26 00:56:31,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [353553064] [2022-11-26 00:56:31,589 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:31,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-26 00:56:31,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:31,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-26 00:56:31,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=195, Invalid=1875, Unknown=0, NotChecked=0, Total=2070 [2022-11-26 00:56:31,591 INFO L87 Difference]: Start difference. First operand 30 states and 31 transitions. Second operand has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:32,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:32,629 INFO L93 Difference]: Finished difference Result 32 states and 33 transitions. [2022-11-26 00:56:32,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-26 00:56:32,630 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-26 00:56:32,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:32,630 INFO L225 Difference]: With dead ends: 32 [2022-11-26 00:56:32,630 INFO L226 Difference]: Without dead ends: 32 [2022-11-26 00:56:32,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 651 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=439, Invalid=2753, Unknown=0, NotChecked=0, Total=3192 [2022-11-26 00:56:32,632 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 168 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 428 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 435 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 428 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:32,632 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 0 Invalid, 435 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 428 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-26 00:56:32,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-26 00:56:32,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 31. [2022-11-26 00:56:32,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 29 states have (on average 1.103448275862069) internal successors, (32), 30 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:32,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 32 transitions. [2022-11-26 00:56:32,634 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 32 transitions. Word has length 26 [2022-11-26 00:56:32,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:32,635 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 32 transitions. [2022-11-26 00:56:32,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:32,635 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 32 transitions. [2022-11-26 00:56:32,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-26 00:56:32,638 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:32,638 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 1, 1, 1, 1, 1] [2022-11-26 00:56:32,646 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-26 00:56:32,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-26 00:56:32,843 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:32,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:32,843 INFO L85 PathProgramCache]: Analyzing trace with hash 473372533, now seen corresponding path program 8 times [2022-11-26 00:56:32,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:32,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941682317] [2022-11-26 00:56:32,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:32,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:32,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:33,433 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:33,434 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:33,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941682317] [2022-11-26 00:56:33,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941682317] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:33,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1333075203] [2022-11-26 00:56:33,434 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:56:33,434 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:33,435 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:33,439 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:33,463 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-26 00:56:33,718 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-26 00:56:33,718 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:33,721 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-26 00:56:33,731 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:33,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:33,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:34,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:56:34,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:56:34,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:56:34,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:56:34,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:56:34,127 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:34,127 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:34,243 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_563 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_563) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 00:56:34,259 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_563 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_563) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 00:56:34,273 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:34,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:56:34,280 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:34,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:56:34,440 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 21 not checked. [2022-11-26 00:56:34,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1333075203] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:34,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [647001990] [2022-11-26 00:56:34,442 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:34,442 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:34,442 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:34,443 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:34,443 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:34,474 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:34,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:34,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:34,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:34,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:34,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:34,666 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:34,692 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:34,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:34,771 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:34,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:34,822 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:34,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:34,835 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:35,878 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3140#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:35,878 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:35,878 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:35,879 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 30 [2022-11-26 00:56:35,879 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150830695] [2022-11-26 00:56:35,879 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:35,879 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-26 00:56:35,879 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:35,880 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-26 00:56:35,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=108, Invalid=1141, Unknown=19, NotChecked=138, Total=1406 [2022-11-26 00:56:35,881 INFO L87 Difference]: Start difference. First operand 31 states and 32 transitions. Second operand has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:36,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:36,441 INFO L93 Difference]: Finished difference Result 50 states and 51 transitions. [2022-11-26 00:56:36,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-26 00:56:36,441 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-26 00:56:36,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:36,442 INFO L225 Difference]: With dead ends: 50 [2022-11-26 00:56:36,442 INFO L226 Difference]: Without dead ends: 34 [2022-11-26 00:56:36,442 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 62 SyntacticMatches, 5 SemanticMatches, 43 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 326 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=156, Invalid=1639, Unknown=19, NotChecked=166, Total=1980 [2022-11-26 00:56:36,443 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 11 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 439 mSolverCounterSat, 5 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 501 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 439 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 56 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:36,443 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 42 Invalid, 501 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 439 Invalid, 1 Unknown, 56 Unchecked, 0.3s Time] [2022-11-26 00:56:36,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-26 00:56:36,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 33. [2022-11-26 00:56:36,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 31 states have (on average 1.096774193548387) internal successors, (34), 32 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:36,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 34 transitions. [2022-11-26 00:56:36,445 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 34 transitions. Word has length 28 [2022-11-26 00:56:36,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:36,445 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 34 transitions. [2022-11-26 00:56:36,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:36,445 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 34 transitions. [2022-11-26 00:56:36,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-26 00:56:36,446 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:36,446 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 1, 1, 1, 1, 1] [2022-11-26 00:56:36,475 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:36,652 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-26 00:56:36,652 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:36,652 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:36,652 INFO L85 PathProgramCache]: Analyzing trace with hash 1278867518, now seen corresponding path program 9 times [2022-11-26 00:56:36,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:36,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [444213692] [2022-11-26 00:56:36,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:36,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:36,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:37,034 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 9 proven. 51 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:37,034 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:37,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [444213692] [2022-11-26 00:56:37,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [444213692] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:37,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [390529130] [2022-11-26 00:56:37,034 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:56:37,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:37,035 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:37,036 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:37,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-26 00:56:37,259 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:56:37,259 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:37,262 INFO L263 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-26 00:56:37,264 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:37,280 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:56:37,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:56:37,476 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:37,476 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:37,891 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:37,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [390529130] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:37,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2051397503] [2022-11-26 00:56:37,893 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:37,893 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:37,893 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:37,893 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:37,894 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:37,922 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:37,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:37,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:38,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:38,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:38,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:38,127 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:38,158 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:38,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:38,267 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:38,372 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-11-26 00:56:38,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-11-26 00:56:38,484 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:38,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:38,551 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:38,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:38,560 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:39,530 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3456#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:39,530 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:39,530 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:39,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 14, 14] total 34 [2022-11-26 00:56:39,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432133835] [2022-11-26 00:56:39,531 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:39,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-26 00:56:39,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:39,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-26 00:56:39,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=218, Invalid=1588, Unknown=0, NotChecked=0, Total=1806 [2022-11-26 00:56:39,533 INFO L87 Difference]: Start difference. First operand 33 states and 34 transitions. Second operand has 35 states, 34 states have (on average 2.2058823529411766) internal successors, (75), 35 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:39,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:39,888 INFO L93 Difference]: Finished difference Result 38 states and 39 transitions. [2022-11-26 00:56:39,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-26 00:56:39,889 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.2058823529411766) internal successors, (75), 35 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-26 00:56:39,889 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:39,889 INFO L225 Difference]: With dead ends: 38 [2022-11-26 00:56:39,889 INFO L226 Difference]: Without dead ends: 38 [2022-11-26 00:56:39,891 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 687 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=414, Invalid=2136, Unknown=0, NotChecked=0, Total=2550 [2022-11-26 00:56:39,891 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 134 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 332 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 332 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:39,891 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 3 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 332 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:56:39,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-26 00:56:39,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 35. [2022-11-26 00:56:39,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 33 states have (on average 1.0909090909090908) internal successors, (36), 34 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:39,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 36 transitions. [2022-11-26 00:56:39,893 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 36 transitions. Word has length 30 [2022-11-26 00:56:39,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:39,893 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 36 transitions. [2022-11-26 00:56:39,894 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.2058823529411766) internal successors, (75), 35 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:39,894 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 36 transitions. [2022-11-26 00:56:39,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-26 00:56:39,894 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:39,894 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 1, 1, 1, 1, 1] [2022-11-26 00:56:39,903 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-26 00:56:40,099 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-26 00:56:40,099 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:40,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:40,099 INFO L85 PathProgramCache]: Analyzing trace with hash 990187381, now seen corresponding path program 5 times [2022-11-26 00:56:40,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:40,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1900256925] [2022-11-26 00:56:40,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:40,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:40,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:40,740 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 9 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:40,740 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:40,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1900256925] [2022-11-26 00:56:40,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1900256925] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:40,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1805262692] [2022-11-26 00:56:40,741 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:56:40,741 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:40,741 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:40,742 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:40,771 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-26 00:56:41,060 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-26 00:56:41,060 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:41,063 INFO L263 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-26 00:56:41,065 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:41,117 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:41,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:56:41,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:41,705 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:41,705 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:42,328 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:42,370 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 25 proven. 40 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:42,371 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1805262692] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:42,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1244443574] [2022-11-26 00:56:42,372 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:42,372 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:42,372 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:42,373 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:42,373 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:42,398 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:42,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:42,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:42,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:42,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:42,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:42,604 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:42,637 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:42,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:42,728 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:42,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:42,804 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:42,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:42,820 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:44,608 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3778#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:44,608 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:44,608 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:44,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 14] total 43 [2022-11-26 00:56:44,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1028650359] [2022-11-26 00:56:44,609 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:44,609 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-26 00:56:44,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:44,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-26 00:56:44,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=247, Invalid=2509, Unknown=0, NotChecked=0, Total=2756 [2022-11-26 00:56:44,611 INFO L87 Difference]: Start difference. First operand 35 states and 36 transitions. Second operand has 45 states, 44 states have (on average 2.1136363636363638) internal successors, (93), 44 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:46,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:46,057 INFO L93 Difference]: Finished difference Result 37 states and 38 transitions. [2022-11-26 00:56:46,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-26 00:56:46,057 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 2.1136363636363638) internal successors, (93), 44 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-26 00:56:46,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:46,058 INFO L225 Difference]: With dead ends: 37 [2022-11-26 00:56:46,058 INFO L226 Difference]: Without dead ends: 37 [2022-11-26 00:56:46,059 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1029 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=691, Invalid=4279, Unknown=0, NotChecked=0, Total=4970 [2022-11-26 00:56:46,059 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 250 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 465 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 250 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 476 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:46,060 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [250 Valid, 0 Invalid, 476 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 465 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-26 00:56:46,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-26 00:56:46,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-11-26 00:56:46,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 34 states have (on average 1.088235294117647) internal successors, (37), 35 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:46,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 37 transitions. [2022-11-26 00:56:46,062 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 37 transitions. Word has length 31 [2022-11-26 00:56:46,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:46,062 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 37 transitions. [2022-11-26 00:56:46,062 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 2.1136363636363638) internal successors, (93), 44 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:46,063 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 37 transitions. [2022-11-26 00:56:46,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-26 00:56:46,063 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:46,063 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 1, 1, 1, 1, 1] [2022-11-26 00:56:46,069 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:46,268 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-26 00:56:46,269 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:46,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:46,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1912666308, now seen corresponding path program 10 times [2022-11-26 00:56:46,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:46,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2003102497] [2022-11-26 00:56:46,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:46,270 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:46,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:47,006 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:47,007 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:47,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2003102497] [2022-11-26 00:56:47,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2003102497] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:47,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [891106162] [2022-11-26 00:56:47,007 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:56:47,007 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:47,007 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:47,009 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:47,035 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-26 00:56:47,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:47,157 INFO L263 TraceCheckSpWp]: Trace formula consists of 284 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-26 00:56:47,160 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:47,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:47,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:47,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:56:47,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:56:47,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:56:47,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:56:47,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:56:47,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:56:47,844 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:47,844 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:47,882 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-26 00:56:47,955 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 00:56:47,967 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 00:56:47,978 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-11-26 00:56:48,037 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:48,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:56:48,044 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:56:48,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-11-26 00:56:48,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:48,617 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 38 not checked. [2022-11-26 00:56:48,617 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [891106162] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:48,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [27112196] [2022-11-26 00:56:48,619 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:48,619 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:48,619 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:48,619 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:48,620 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:48,647 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:48,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:48,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:48,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:48,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:48,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:48,851 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:48,873 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:48,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:49,109 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-11-26 00:56:49,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-11-26 00:56:49,413 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:49,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:49,457 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:49,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:49,471 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:50,636 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4134#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:50,636 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:50,636 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:50,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 47 [2022-11-26 00:56:50,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165590469] [2022-11-26 00:56:50,637 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:50,637 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-26 00:56:50,637 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:50,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-26 00:56:50,639 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=2390, Unknown=8, NotChecked=404, Total=2970 [2022-11-26 00:56:50,639 INFO L87 Difference]: Start difference. First operand 36 states and 37 transitions. Second operand has 47 states, 47 states have (on average 1.8936170212765957) internal successors, (89), 47 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:51,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:51,747 INFO L93 Difference]: Finished difference Result 58 states and 59 transitions. [2022-11-26 00:56:51,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-26 00:56:51,748 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.8936170212765957) internal successors, (89), 47 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-26 00:56:51,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:51,748 INFO L225 Difference]: With dead ends: 58 [2022-11-26 00:56:51,749 INFO L226 Difference]: Without dead ends: 39 [2022-11-26 00:56:51,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 66 SyntacticMatches, 2 SemanticMatches, 66 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 814 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=302, Invalid=3738, Unknown=8, NotChecked=508, Total=4556 [2022-11-26 00:56:51,750 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 97 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 700 mSolverCounterSat, 8 mSolverCounterUnsat, 16 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 854 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 700 IncrementalHoareTripleChecker+Invalid, 16 IncrementalHoareTripleChecker+Unknown, 130 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:51,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 57 Invalid, 854 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 700 Invalid, 16 Unknown, 130 Unchecked, 0.4s Time] [2022-11-26 00:56:51,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-11-26 00:56:51,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 38. [2022-11-26 00:56:51,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 36 states have (on average 1.0833333333333333) internal successors, (39), 37 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:51,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 39 transitions. [2022-11-26 00:56:51,753 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 39 transitions. Word has length 33 [2022-11-26 00:56:51,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:51,753 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 39 transitions. [2022-11-26 00:56:51,753 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.8936170212765957) internal successors, (89), 47 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:51,754 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 39 transitions. [2022-11-26 00:56:51,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-26 00:56:51,754 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:51,754 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2022-11-26 00:56:51,760 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:51,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-26 00:56:51,959 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:51,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:51,959 INFO L85 PathProgramCache]: Analyzing trace with hash -1547289581, now seen corresponding path program 11 times [2022-11-26 00:56:51,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:51,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149944305] [2022-11-26 00:56:51,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:51,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:51,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:52,512 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 16 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:52,513 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:52,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149944305] [2022-11-26 00:56:52,513 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149944305] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:52,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2047098626] [2022-11-26 00:56:52,513 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:56:52,513 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:52,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:52,523 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:52,528 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-26 00:56:52,845 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-26 00:56:52,845 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:52,848 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-26 00:56:52,850 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:53,195 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 25 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:53,196 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:53,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-26 00:56:53,628 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 25 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:53,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2047098626] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:53,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [922357260] [2022-11-26 00:56:53,630 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:53,630 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:53,630 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:53,630 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:53,631 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:53,661 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:53,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:53,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:53,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:53,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:53,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:53,862 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:53,892 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:53,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:53,976 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:53,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:54,034 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:54,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:54,058 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:56:55,577 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4509#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:56:55,577 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:56:55,578 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:56:55,578 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 38 [2022-11-26 00:56:55,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57782511] [2022-11-26 00:56:55,578 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:56:55,578 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-26 00:56:55,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:56:55,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-26 00:56:55,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=1880, Unknown=0, NotChecked=0, Total=2162 [2022-11-26 00:56:55,581 INFO L87 Difference]: Start difference. First operand 38 states and 39 transitions. Second operand has 39 states, 38 states have (on average 2.3421052631578947) internal successors, (89), 39 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:56,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:56:56,089 INFO L93 Difference]: Finished difference Result 43 states and 44 transitions. [2022-11-26 00:56:56,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-26 00:56:56,090 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 2.3421052631578947) internal successors, (89), 39 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-26 00:56:56,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:56:56,090 INFO L225 Difference]: With dead ends: 43 [2022-11-26 00:56:56,090 INFO L226 Difference]: Without dead ends: 43 [2022-11-26 00:56:56,091 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 66 SyntacticMatches, 7 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1065 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=507, Invalid=2573, Unknown=0, NotChecked=0, Total=3080 [2022-11-26 00:56:56,092 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 66 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 427 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 428 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 427 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:56:56,092 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 1 Invalid, 428 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 427 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:56:56,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-26 00:56:56,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 40. [2022-11-26 00:56:56,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 38 states have (on average 1.0789473684210527) internal successors, (41), 39 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:56,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 41 transitions. [2022-11-26 00:56:56,096 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 41 transitions. Word has length 35 [2022-11-26 00:56:56,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:56:56,096 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 41 transitions. [2022-11-26 00:56:56,096 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 2.3421052631578947) internal successors, (89), 39 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:56:56,097 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 41 transitions. [2022-11-26 00:56:56,097 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-26 00:56:56,097 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:56:56,097 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2022-11-26 00:56:56,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-26 00:56:56,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-26 00:56:56,303 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:56:56,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:56:56,303 INFO L85 PathProgramCache]: Analyzing trace with hash -721336768, now seen corresponding path program 6 times [2022-11-26 00:56:56,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:56:56,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211576247] [2022-11-26 00:56:56,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:56:56,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:56:56,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:56:57,108 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 16 proven. 77 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:57,108 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:56:57,108 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211576247] [2022-11-26 00:56:57,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211576247] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:56:57,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [185701383] [2022-11-26 00:56:57,109 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:56:57,109 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:56:57,109 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:56:57,112 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:56:57,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-26 00:56:57,313 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:56:57,313 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:56:57,316 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 58 conjunts are in the unsatisfiable core [2022-11-26 00:56:57,318 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:56:57,359 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:57,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 00:56:57,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:56:58,353 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 25 proven. 68 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:58,353 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:56:59,187 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:59,247 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 36 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:56:59,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [185701383] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:56:59,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [578841262] [2022-11-26 00:56:59,248 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:56:59,249 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:56:59,249 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:56:59,249 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:56:59,249 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:56:59,283 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:56:59,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:56:59,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:56:59,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:59,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:59,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:56:59,464 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:56:59,487 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:56:59,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:56:59,673 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-11-26 00:56:59,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-11-26 00:56:59,915 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:59,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:59,962 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:56:59,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:56:59,977 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:01,227 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4877#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:01,227 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:01,227 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:01,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 16] total 47 [2022-11-26 00:57:01,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1540483301] [2022-11-26 00:57:01,228 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:01,228 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-26 00:57:01,228 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:01,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-26 00:57:01,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=318, Invalid=2874, Unknown=0, NotChecked=0, Total=3192 [2022-11-26 00:57:01,230 INFO L87 Difference]: Start difference. First operand 40 states and 41 transitions. Second operand has 49 states, 48 states have (on average 2.25) internal successors, (108), 48 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:02,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:02,693 INFO L93 Difference]: Finished difference Result 42 states and 43 transitions. [2022-11-26 00:57:02,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-26 00:57:02,694 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.25) internal successors, (108), 48 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-26 00:57:02,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:02,694 INFO L225 Difference]: With dead ends: 42 [2022-11-26 00:57:02,694 INFO L226 Difference]: Without dead ends: 42 [2022-11-26 00:57:02,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1223 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=779, Invalid=4477, Unknown=0, NotChecked=0, Total=5256 [2022-11-26 00:57:02,696 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 290 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 642 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:02,696 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 0 Invalid, 642 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-26 00:57:02,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2022-11-26 00:57:02,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 41. [2022-11-26 00:57:02,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 39 states have (on average 1.0769230769230769) internal successors, (42), 40 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:02,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 42 transitions. [2022-11-26 00:57:02,698 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 42 transitions. Word has length 36 [2022-11-26 00:57:02,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:02,698 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 42 transitions. [2022-11-26 00:57:02,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.25) internal successors, (108), 48 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:02,699 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 42 transitions. [2022-11-26 00:57:02,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-26 00:57:02,699 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:02,699 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 1, 1, 1, 1, 1] [2022-11-26 00:57:02,705 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:02,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-26 00:57:02,903 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:02,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:02,903 INFO L85 PathProgramCache]: Analyzing trace with hash -1714899129, now seen corresponding path program 12 times [2022-11-26 00:57:02,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:02,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1328944737] [2022-11-26 00:57:02,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:02,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:02,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:03,828 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 99 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:03,828 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:03,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1328944737] [2022-11-26 00:57:03,828 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1328944737] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:03,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1351125520] [2022-11-26 00:57:03,829 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:57:03,829 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:03,829 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:03,830 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:03,832 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-26 00:57:04,055 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:57:04,056 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:57:04,059 INFO L263 TraceCheckSpWp]: Trace formula consists of 320 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-26 00:57:04,062 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:04,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:57:04,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:04,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:57:04,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:04,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:04,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:04,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:04,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:04,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:57:04,547 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 99 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:04,548 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:04,620 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_945 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_945) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 00:57:04,629 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_945 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_945) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 00:57:04,700 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_945 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_945) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-11-26 00:57:04,778 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:04,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:57:04,790 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:04,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:57:04,974 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 45 not checked. [2022-11-26 00:57:04,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1351125520] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:04,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1332093594] [2022-11-26 00:57:04,976 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:04,976 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:04,976 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:04,977 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:04,977 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:05,003 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:05,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:05,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:57:05,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:05,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:05,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:05,186 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:05,215 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:05,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:05,311 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:05,398 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-11-26 00:57:05,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-11-26 00:57:05,535 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:05,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:05,585 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:05,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:05,596 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:06,729 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5260#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:06,730 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:06,730 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:06,730 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 20] total 38 [2022-11-26 00:57:06,730 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740044725] [2022-11-26 00:57:06,730 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:06,730 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-26 00:57:06,731 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:06,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-26 00:57:06,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=128, Invalid=1653, Unknown=37, NotChecked=252, Total=2070 [2022-11-26 00:57:06,731 INFO L87 Difference]: Start difference. First operand 41 states and 42 transitions. Second operand has 38 states, 38 states have (on average 2.0789473684210527) internal successors, (79), 38 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:07,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:07,703 INFO L93 Difference]: Finished difference Result 66 states and 67 transitions. [2022-11-26 00:57:07,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-26 00:57:07,703 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.0789473684210527) internal successors, (79), 38 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-26 00:57:07,703 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:07,704 INFO L225 Difference]: With dead ends: 66 [2022-11-26 00:57:07,704 INFO L226 Difference]: Without dead ends: 44 [2022-11-26 00:57:07,704 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 90 SyntacticMatches, 6 SemanticMatches, 54 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 465 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=197, Invalid=2534, Unknown=37, NotChecked=312, Total=3080 [2022-11-26 00:57:07,704 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 23 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 942 mSolverCounterSat, 7 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 942 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 118 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:07,705 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 55 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 942 Invalid, 1 Unknown, 118 Unchecked, 0.5s Time] [2022-11-26 00:57:07,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2022-11-26 00:57:07,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 43. [2022-11-26 00:57:07,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 41 states have (on average 1.0731707317073171) internal successors, (44), 42 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:07,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 44 transitions. [2022-11-26 00:57:07,706 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 44 transitions. Word has length 38 [2022-11-26 00:57:07,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:07,707 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 44 transitions. [2022-11-26 00:57:07,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.0789473684210527) internal successors, (79), 38 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:07,707 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 44 transitions. [2022-11-26 00:57:07,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-26 00:57:07,708 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:07,708 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2022-11-26 00:57:07,714 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:07,914 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:07,914 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:07,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:07,915 INFO L85 PathProgramCache]: Analyzing trace with hash 860090576, now seen corresponding path program 13 times [2022-11-26 00:57:07,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:07,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555846365] [2022-11-26 00:57:07,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:07,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:07,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:08,572 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 25 proven. 94 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:08,572 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:08,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555846365] [2022-11-26 00:57:08,573 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555846365] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:08,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [956698036] [2022-11-26 00:57:08,573 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:57:08,573 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:08,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:08,575 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:08,581 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-26 00:57:08,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:08,735 INFO L263 TraceCheckSpWp]: Trace formula consists of 333 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-26 00:57:08,736 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:09,001 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 36 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:09,001 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:09,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 00:57:09,460 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 36 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:09,461 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [956698036] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:09,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [887516982] [2022-11-26 00:57:09,462 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:09,462 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:09,463 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:09,463 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:09,463 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:09,489 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:09,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:09,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:57:09,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:09,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:09,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:09,666 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:09,696 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:09,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:09,842 INFO L321 Elim1Store]: treesize reduction 169, result has 12.9 percent of original size [2022-11-26 00:57:09,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 224 treesize of output 219 [2022-11-26 00:57:09,937 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:09,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:09,993 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:09,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:10,002 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:11,056 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5671#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:11,056 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:11,057 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:11,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 18] total 36 [2022-11-26 00:57:11,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1761827018] [2022-11-26 00:57:11,057 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:11,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-26 00:57:11,057 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:11,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-26 00:57:11,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=223, Invalid=1757, Unknown=0, NotChecked=0, Total=1980 [2022-11-26 00:57:11,059 INFO L87 Difference]: Start difference. First operand 43 states and 44 transitions. Second operand has 37 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 37 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:11,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:11,694 INFO L93 Difference]: Finished difference Result 48 states and 49 transitions. [2022-11-26 00:57:11,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-26 00:57:11,695 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 37 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-26 00:57:11,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:11,695 INFO L225 Difference]: With dead ends: 48 [2022-11-26 00:57:11,695 INFO L226 Difference]: Without dead ends: 48 [2022-11-26 00:57:11,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 84 SyntacticMatches, 8 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 964 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=458, Invalid=2512, Unknown=0, NotChecked=0, Total=2970 [2022-11-26 00:57:11,696 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 103 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 579 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 580 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 579 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:11,696 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 1 Invalid, 580 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 579 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-26 00:57:11,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-11-26 00:57:11,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 45. [2022-11-26 00:57:11,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 43 states have (on average 1.069767441860465) internal successors, (46), 44 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:11,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 46 transitions. [2022-11-26 00:57:11,698 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 46 transitions. Word has length 40 [2022-11-26 00:57:11,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:11,699 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 46 transitions. [2022-11-26 00:57:11,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 37 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:11,699 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 46 transitions. [2022-11-26 00:57:11,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-26 00:57:11,700 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:11,700 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2022-11-26 00:57:11,719 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:11,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:11,906 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:11,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:11,906 INFO L85 PathProgramCache]: Analyzing trace with hash 893004067, now seen corresponding path program 7 times [2022-11-26 00:57:11,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:11,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [668539751] [2022-11-26 00:57:11,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:11,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:11,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:12,863 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 25 proven. 101 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:12,863 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:12,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [668539751] [2022-11-26 00:57:12,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [668539751] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:12,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [350923848] [2022-11-26 00:57:12,863 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:57:12,863 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:12,864 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:12,864 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:12,867 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-26 00:57:13,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:13,027 INFO L263 TraceCheckSpWp]: Trace formula consists of 339 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-26 00:57:13,028 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:13,088 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:57:13,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:57:14,375 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 36 proven. 90 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:14,375 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:15,496 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 49 proven. 77 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:15,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [350923848] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:15,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1355143815] [2022-11-26 00:57:15,498 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:15,498 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:15,498 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:15,498 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:15,498 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:15,529 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:15,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:15,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:15,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:15,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:15,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:15,704 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:15,761 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:15,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:15,833 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:15,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:15,885 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:15,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:15,895 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:17,275 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6088#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:17,276 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:17,276 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:17,276 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 54 [2022-11-26 00:57:17,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1786852762] [2022-11-26 00:57:17,276 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:17,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-11-26 00:57:17,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:17,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-11-26 00:57:17,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=324, Invalid=3708, Unknown=0, NotChecked=0, Total=4032 [2022-11-26 00:57:17,278 INFO L87 Difference]: Start difference. First operand 45 states and 46 transitions. Second operand has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:19,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:19,454 INFO L93 Difference]: Finished difference Result 47 states and 48 transitions. [2022-11-26 00:57:19,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-26 00:57:19,454 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-26 00:57:19,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:19,455 INFO L225 Difference]: With dead ends: 47 [2022-11-26 00:57:19,455 INFO L226 Difference]: Without dead ends: 47 [2022-11-26 00:57:19,456 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1428 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=865, Invalid=5615, Unknown=0, NotChecked=0, Total=6480 [2022-11-26 00:57:19,456 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 231 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 808 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 813 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 808 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:19,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [231 Valid, 0 Invalid, 813 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 808 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:57:19,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2022-11-26 00:57:19,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 46. [2022-11-26 00:57:19,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 44 states have (on average 1.0681818181818181) internal successors, (47), 45 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:19,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 47 transitions. [2022-11-26 00:57:19,459 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 47 transitions. Word has length 41 [2022-11-26 00:57:19,459 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:19,459 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 47 transitions. [2022-11-26 00:57:19,459 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:19,459 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 47 transitions. [2022-11-26 00:57:19,460 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-26 00:57:19,460 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:19,460 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 7, 1, 1, 1, 1, 1] [2022-11-26 00:57:19,467 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:19,663 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-26 00:57:19,663 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:19,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:19,664 INFO L85 PathProgramCache]: Analyzing trace with hash -816550550, now seen corresponding path program 14 times [2022-11-26 00:57:19,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:19,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1006140288] [2022-11-26 00:57:19,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:19,664 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:19,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:20,657 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:20,658 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:20,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1006140288] [2022-11-26 00:57:20,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1006140288] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:20,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1532556921] [2022-11-26 00:57:20,658 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:57:20,658 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:20,658 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:20,659 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:20,661 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-26 00:57:21,207 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-11-26 00:57:21,207 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:57:21,212 INFO L263 TraceCheckSpWp]: Trace formula consists of 356 conjuncts, 120 conjunts are in the unsatisfiable core [2022-11-26 00:57:21,215 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:21,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:57:21,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:57:21,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:21,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:21,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:22,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:22,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:22,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:22,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:22,428 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:22,430 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:22,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 00:57:22,434 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:22,434 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:22,543 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1171 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1171) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 00:57:22,553 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1171 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1171) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 00:57:22,712 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1171 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1171) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-26 00:57:22,796 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:22,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:57:22,803 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:22,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:57:22,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:57:23,311 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 79 refuted. 0 times theorem prover too weak. 0 trivial. 54 not checked. [2022-11-26 00:57:23,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1532556921] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:23,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1913908666] [2022-11-26 00:57:23,312 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:23,313 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:23,313 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:23,313 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:23,313 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:23,343 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:23,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:23,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:23,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:23,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:23,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:23,530 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:23,561 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:23,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:23,646 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:23,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:23,701 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:23,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:23,708 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:25,048 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6532#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:25,048 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:25,048 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:25,048 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 22] total 57 [2022-11-26 00:57:25,049 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [602034016] [2022-11-26 00:57:25,049 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:25,049 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-26 00:57:25,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:25,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-26 00:57:25,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=199, Invalid=3544, Unknown=51, NotChecked=366, Total=4160 [2022-11-26 00:57:25,051 INFO L87 Difference]: Start difference. First operand 46 states and 47 transitions. Second operand has 57 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:26,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:26,459 INFO L93 Difference]: Finished difference Result 74 states and 75 transitions. [2022-11-26 00:57:26,459 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-26 00:57:26,459 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-26 00:57:26,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:26,460 INFO L225 Difference]: With dead ends: 74 [2022-11-26 00:57:26,460 INFO L226 Difference]: Without dead ends: 49 [2022-11-26 00:57:26,461 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 1296 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=359, Invalid=5608, Unknown=51, NotChecked=462, Total=6480 [2022-11-26 00:57:26,461 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 77 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1150 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 1290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 1150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 132 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:26,462 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 69 Invalid, 1290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 1150 Invalid, 0 Unknown, 132 Unchecked, 0.6s Time] [2022-11-26 00:57:26,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2022-11-26 00:57:26,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 48. [2022-11-26 00:57:26,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 46 states have (on average 1.065217391304348) internal successors, (49), 47 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:26,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 49 transitions. [2022-11-26 00:57:26,464 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 49 transitions. Word has length 43 [2022-11-26 00:57:26,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:26,464 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 49 transitions. [2022-11-26 00:57:26,464 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:26,464 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 49 transitions. [2022-11-26 00:57:26,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-26 00:57:26,465 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:26,465 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2022-11-26 00:57:26,471 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:26,671 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-26 00:57:26,671 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:26,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:26,671 INFO L85 PathProgramCache]: Analyzing trace with hash 415023489, now seen corresponding path program 15 times [2022-11-26 00:57:26,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:26,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [913895003] [2022-11-26 00:57:26,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:26,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:26,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:27,403 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 36 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:27,403 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:27,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [913895003] [2022-11-26 00:57:27,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [913895003] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:27,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1226386486] [2022-11-26 00:57:27,403 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:57:27,404 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:27,404 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:27,405 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:27,431 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-26 00:57:28,085 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:57:28,085 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:57:28,090 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-26 00:57:28,092 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:28,104 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:57:28,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:57:28,435 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:28,435 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:29,212 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:29,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1226386486] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:29,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [289146231] [2022-11-26 00:57:29,213 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:29,213 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:29,214 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:29,214 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:29,214 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:29,243 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:29,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:29,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:57:29,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:29,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:29,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:29,405 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:29,434 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:29,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:29,602 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-11-26 00:57:29,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 207 treesize of output 218 [2022-11-26 00:57:29,722 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:29,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:29,775 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:29,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:29,783 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:30,915 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7008#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:30,915 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:30,915 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:30,915 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 20] total 49 [2022-11-26 00:57:30,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1772051859] [2022-11-26 00:57:30,916 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:30,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-26 00:57:30,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:30,917 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-26 00:57:30,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=389, Invalid=2917, Unknown=0, NotChecked=0, Total=3306 [2022-11-26 00:57:30,917 INFO L87 Difference]: Start difference. First operand 48 states and 49 transitions. Second operand has 50 states, 49 states have (on average 2.2653061224489797) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:31,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:31,634 INFO L93 Difference]: Finished difference Result 53 states and 54 transitions. [2022-11-26 00:57:31,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-26 00:57:31,635 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 49 states have (on average 2.2653061224489797) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-26 00:57:31,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:31,635 INFO L225 Difference]: With dead ends: 53 [2022-11-26 00:57:31,635 INFO L226 Difference]: Without dead ends: 53 [2022-11-26 00:57:31,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 96 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1341 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=774, Invalid=3918, Unknown=0, NotChecked=0, Total=4692 [2022-11-26 00:57:31,637 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 321 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 685 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 686 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 685 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:31,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 1 Invalid, 686 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 685 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-26 00:57:31,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-26 00:57:31,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 50. [2022-11-26 00:57:31,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 48 states have (on average 1.0625) internal successors, (51), 49 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:31,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 51 transitions. [2022-11-26 00:57:31,639 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 51 transitions. Word has length 45 [2022-11-26 00:57:31,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:31,639 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 51 transitions. [2022-11-26 00:57:31,640 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 49 states have (on average 2.2653061224489797) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:31,640 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 51 transitions. [2022-11-26 00:57:31,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-26 00:57:31,640 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:31,641 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2022-11-26 00:57:31,655 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:31,855 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-26 00:57:31,855 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:31,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:31,855 INFO L85 PathProgramCache]: Analyzing trace with hash -19173742, now seen corresponding path program 8 times [2022-11-26 00:57:31,855 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:31,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963606159] [2022-11-26 00:57:31,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:31,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:31,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:32,869 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 36 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:32,869 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:32,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963606159] [2022-11-26 00:57:32,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963606159] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:32,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1362972216] [2022-11-26 00:57:32,870 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:57:32,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:32,870 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:32,871 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:32,874 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-26 00:57:33,732 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-11-26 00:57:33,732 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:57:33,737 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 82 conjunts are in the unsatisfiable core [2022-11-26 00:57:33,740 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:33,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:57:33,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:57:34,914 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 43 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:34,914 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:36,012 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:36,069 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 64 proven. 100 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:36,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1362972216] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:36,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1425416510] [2022-11-26 00:57:36,071 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:36,071 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:36,071 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:36,072 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:36,072 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:36,117 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:36,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:36,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:36,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:36,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:36,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:36,294 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:36,317 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:36,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:36,374 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:36,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:36,423 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:36,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:36,434 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:37,826 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7474#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:37,826 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:37,826 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:37,826 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 20] total 61 [2022-11-26 00:57:37,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043446406] [2022-11-26 00:57:37,826 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:37,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-26 00:57:37,827 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:37,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-26 00:57:37,827 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=421, Invalid=4549, Unknown=0, NotChecked=0, Total=4970 [2022-11-26 00:57:37,827 INFO L87 Difference]: Start difference. First operand 50 states and 51 transitions. Second operand has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:40,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:40,528 INFO L93 Difference]: Finished difference Result 52 states and 53 transitions. [2022-11-26 00:57:40,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-26 00:57:40,529 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-26 00:57:40,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:40,529 INFO L225 Difference]: With dead ends: 52 [2022-11-26 00:57:40,529 INFO L226 Difference]: Without dead ends: 52 [2022-11-26 00:57:40,530 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2070 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=1339, Invalid=8167, Unknown=0, NotChecked=0, Total=9506 [2022-11-26 00:57:40,531 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 395 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 924 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 395 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 934 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 924 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:40,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [395 Valid, 0 Invalid, 934 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 924 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:57:40,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2022-11-26 00:57:40,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 51. [2022-11-26 00:57:40,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 49 states have (on average 1.0612244897959184) internal successors, (52), 50 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:40,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 52 transitions. [2022-11-26 00:57:40,533 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 52 transitions. Word has length 46 [2022-11-26 00:57:40,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:40,533 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 52 transitions. [2022-11-26 00:57:40,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:40,533 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 52 transitions. [2022-11-26 00:57:40,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-26 00:57:40,534 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:40,534 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 8, 1, 1, 1, 1, 1] [2022-11-26 00:57:40,540 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-11-26 00:57:40,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:40,740 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:40,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:40,741 INFO L85 PathProgramCache]: Analyzing trace with hash -1246096615, now seen corresponding path program 16 times [2022-11-26 00:57:40,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:40,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1294938396] [2022-11-26 00:57:40,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:40,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:40,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:41,934 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:41,934 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:41,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1294938396] [2022-11-26 00:57:41,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1294938396] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:41,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [558007259] [2022-11-26 00:57:41,935 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:57:41,935 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:41,935 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:41,936 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:41,938 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-26 00:57:42,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:42,127 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 102 conjunts are in the unsatisfiable core [2022-11-26 00:57:42,130 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:42,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:57:42,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:42,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:57:42,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:57:42,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:57:42,768 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:42,768 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:42,850 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1427 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1427) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 00:57:42,939 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1427 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1427) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 00:57:43,100 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1427 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1427) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-11-26 00:57:43,186 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:43,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:57:43,193 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:57:43,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:57:43,415 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 63 not checked. [2022-11-26 00:57:43,415 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [558007259] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:43,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [101887387] [2022-11-26 00:57:43,416 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:43,417 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:43,417 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:43,417 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:43,417 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:43,455 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:43,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:43,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:57:43,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:43,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:43,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:43,614 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:43,636 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:43,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:43,770 INFO L321 Elim1Store]: treesize reduction 159, result has 14.5 percent of original size [2022-11-26 00:57:43,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 8 case distinctions, treesize of input 207 treesize of output 202 [2022-11-26 00:57:43,858 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:43,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:43,908 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:43,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:43,918 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:45,134 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7967#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:45,134 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:45,134 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:45,134 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 24] total 46 [2022-11-26 00:57:45,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659545287] [2022-11-26 00:57:45,135 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:45,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-26 00:57:45,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:45,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-26 00:57:45,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=2355, Unknown=59, NotChecked=300, Total=2862 [2022-11-26 00:57:45,136 INFO L87 Difference]: Start difference. First operand 51 states and 52 transitions. Second operand has 46 states, 46 states have (on average 2.152173913043478) internal successors, (99), 46 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:46,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:46,489 INFO L93 Difference]: Finished difference Result 82 states and 83 transitions. [2022-11-26 00:57:46,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-26 00:57:46,490 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 2.152173913043478) internal successors, (99), 46 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-11-26 00:57:46,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:46,490 INFO L225 Difference]: With dead ends: 82 [2022-11-26 00:57:46,490 INFO L226 Difference]: Without dead ends: 54 [2022-11-26 00:57:46,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 118 SyntacticMatches, 6 SemanticMatches, 64 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 634 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=227, Invalid=3631, Unknown=60, NotChecked=372, Total=4290 [2022-11-26 00:57:46,491 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 23 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 1394 mSolverCounterSat, 9 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 1546 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1394 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 142 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:46,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 61 Invalid, 1546 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 1394 Invalid, 1 Unknown, 142 Unchecked, 0.7s Time] [2022-11-26 00:57:46,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-26 00:57:46,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 53. [2022-11-26 00:57:46,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 51 states have (on average 1.0588235294117647) internal successors, (54), 52 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:46,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 54 transitions. [2022-11-26 00:57:46,494 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 54 transitions. Word has length 48 [2022-11-26 00:57:46,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:46,494 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 54 transitions. [2022-11-26 00:57:46,494 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 2.152173913043478) internal successors, (99), 46 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:46,494 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 54 transitions. [2022-11-26 00:57:46,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-26 00:57:46,495 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:46,495 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2022-11-26 00:57:46,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:46,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:46,701 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:46,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:46,701 INFO L85 PathProgramCache]: Analyzing trace with hash -1952074398, now seen corresponding path program 17 times [2022-11-26 00:57:46,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:46,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134785614] [2022-11-26 00:57:46,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:46,701 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:46,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:47,553 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 49 proven. 149 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:47,553 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:47,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134785614] [2022-11-26 00:57:47,553 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134785614] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:47,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [827228141] [2022-11-26 00:57:47,553 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:57:47,553 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:47,554 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:47,556 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:47,579 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-26 00:57:48,432 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-26 00:57:48,433 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:57:48,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-26 00:57:48,438 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:48,449 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:57:48,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:57:49,024 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 64 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:49,024 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:49,933 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 64 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:49,933 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [827228141] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:49,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1410110215] [2022-11-26 00:57:49,935 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:49,935 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:49,935 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:49,935 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:49,935 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:49,961 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:49,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:50,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:57:50,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:50,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:50,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:50,143 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:50,174 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:50,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:50,345 INFO L321 Elim1Store]: treesize reduction 169, result has 12.9 percent of original size [2022-11-26 00:57:50,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 209 [2022-11-26 00:57:50,442 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:50,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:50,489 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:50,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:50,499 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:51,683 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8495#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:51,683 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:51,683 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:51,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 22, 22] total 63 [2022-11-26 00:57:51,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1992711156] [2022-11-26 00:57:51,683 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:51,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-26 00:57:51,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:51,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-26 00:57:51,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=656, Invalid=4456, Unknown=0, NotChecked=0, Total=5112 [2022-11-26 00:57:51,686 INFO L87 Difference]: Start difference. First operand 53 states and 54 transitions. Second operand has 64 states, 63 states have (on average 2.3492063492063493) internal successors, (148), 64 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:52,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:57:52,465 INFO L93 Difference]: Finished difference Result 58 states and 59 transitions. [2022-11-26 00:57:52,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-26 00:57:52,466 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 63 states have (on average 2.3492063492063493) internal successors, (148), 64 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-26 00:57:52,466 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:57:52,466 INFO L225 Difference]: With dead ends: 58 [2022-11-26 00:57:52,466 INFO L226 Difference]: Without dead ends: 58 [2022-11-26 00:57:52,467 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2269 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=1187, Invalid=5785, Unknown=0, NotChecked=0, Total=6972 [2022-11-26 00:57:52,468 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 313 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 684 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 313 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:57:52,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [313 Valid, 1 Invalid, 685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 684 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-26 00:57:52,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-26 00:57:52,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 55. [2022-11-26 00:57:52,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 53 states have (on average 1.0566037735849056) internal successors, (56), 54 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:52,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 56 transitions. [2022-11-26 00:57:52,471 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 56 transitions. Word has length 50 [2022-11-26 00:57:52,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:57:52,471 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 56 transitions. [2022-11-26 00:57:52,471 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 63 states have (on average 2.3492063492063493) internal successors, (148), 64 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:57:52,471 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 56 transitions. [2022-11-26 00:57:52,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-26 00:57:52,472 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:57:52,472 INFO L195 NwaCegarLoop]: trace histogram [10, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2022-11-26 00:57:52,479 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-26 00:57:52,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-26 00:57:52,679 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:57:52,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:57:52,680 INFO L85 PathProgramCache]: Analyzing trace with hash -384764207, now seen corresponding path program 9 times [2022-11-26 00:57:52,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:57:52,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [472462858] [2022-11-26 00:57:52,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:57:52,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:57:52,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:57:53,762 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 49 proven. 158 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:53,762 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:57:53,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [472462858] [2022-11-26 00:57:53,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [472462858] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:57:53,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [812616351] [2022-11-26 00:57:53,763 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:57:53,763 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:57:53,763 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:57:53,764 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:57:53,787 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-26 00:57:54,405 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:57:54,405 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:57:54,410 INFO L263 TraceCheckSpWp]: Trace formula consists of 411 conjuncts, 99 conjunts are in the unsatisfiable core [2022-11-26 00:57:54,413 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:57:54,458 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:54,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 00:57:54,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:57:56,139 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 64 proven. 143 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:56,139 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:57:57,567 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:57,644 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 81 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:57:57,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [812616351] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:57:57,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [160565042] [2022-11-26 00:57:57,646 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:57:57,646 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:57:57,646 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:57:57,646 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:57:57,646 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:57:57,668 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:57:57,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:57:57,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:57,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:57,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:57,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:57:57,875 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:57:57,908 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:57:57,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:57:57,968 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:57,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:58,018 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:57:58,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:57:58,028 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:57:59,570 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9007#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:57:59,570 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:57:59,570 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:57:59,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 21, 22] total 65 [2022-11-26 00:57:59,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200536266] [2022-11-26 00:57:59,570 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:57:59,571 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2022-11-26 00:57:59,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:57:59,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2022-11-26 00:57:59,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=525, Invalid=5025, Unknown=0, NotChecked=0, Total=5550 [2022-11-26 00:57:59,572 INFO L87 Difference]: Start difference. First operand 55 states and 56 transitions. Second operand has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:01,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:58:01,949 INFO L93 Difference]: Finished difference Result 57 states and 58 transitions. [2022-11-26 00:58:01,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-26 00:58:01,949 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-26 00:58:01,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:58:01,950 INFO L225 Difference]: With dead ends: 57 [2022-11-26 00:58:01,950 INFO L226 Difference]: Without dead ends: 57 [2022-11-26 00:58:01,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2219 ImplicationChecksByTransitivity, 6.0s TimeCoverageRelationStatistics Valid=1373, Invalid=7939, Unknown=0, NotChecked=0, Total=9312 [2022-11-26 00:58:01,951 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 194 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1167 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:58:01,951 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 0 Invalid, 1169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1167 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-26 00:58:01,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-26 00:58:01,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-26 00:58:01,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 54 states have (on average 1.0555555555555556) internal successors, (57), 55 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:01,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 57 transitions. [2022-11-26 00:58:01,953 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 57 transitions. Word has length 51 [2022-11-26 00:58:01,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:58:01,953 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 57 transitions. [2022-11-26 00:58:01,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:01,953 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 57 transitions. [2022-11-26 00:58:01,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-26 00:58:01,954 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:58:01,954 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 9, 1, 1, 1, 1, 1] [2022-11-26 00:58:01,964 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-26 00:58:02,154 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-26 00:58:02,155 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:58:02,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:58:02,155 INFO L85 PathProgramCache]: Analyzing trace with hash -391215208, now seen corresponding path program 18 times [2022-11-26 00:58:02,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:58:02,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629566839] [2022-11-26 00:58:02,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:58:02,155 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:58:02,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:03,330 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:03,330 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:58:03,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629566839] [2022-11-26 00:58:03,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629566839] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:58:03,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1102509769] [2022-11-26 00:58:03,331 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:58:03,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:03,331 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:58:03,335 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:58:03,363 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-26 00:58:03,831 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:58:03,831 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:58:03,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 137 conjunts are in the unsatisfiable core [2022-11-26 00:58:03,840 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:58:04,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:58:04,462 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:04,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:04,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:04,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:04,651 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:04,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:04,748 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:04,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:04,850 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:04,850 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:04,949 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:04,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:05,053 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:05,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:05,156 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:05,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:05,264 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:05,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-11-26 00:58:05,424 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:05,426 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:58:05,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 00:58:05,430 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:05,430 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:58:08,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 1210 treesize of output 1162 [2022-11-26 00:58:11,591 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:11,592 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1102509769] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:58:11,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1888754189] [2022-11-26 00:58:11,593 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:58:11,593 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:58:11,593 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:58:11,593 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:58:11,593 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:58:11,615 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:11,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:58:11,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:58:11,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:11,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:11,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:11,798 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:11,820 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:58:11,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:58:11,902 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:12,006 INFO L321 Elim1Store]: treesize reduction 167, result has 22.3 percent of original size [2022-11-26 00:58:12,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-11-26 00:58:12,121 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:12,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:12,166 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:12,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:12,174 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:58:13,890 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9555#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:58:13,891 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:58:13,891 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:58:13,891 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 27] total 71 [2022-11-26 00:58:13,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849106068] [2022-11-26 00:58:13,891 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:58:13,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-11-26 00:58:13,892 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:58:13,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-11-26 00:58:13,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=214, Invalid=5948, Unknown=0, NotChecked=0, Total=6162 [2022-11-26 00:58:13,893 INFO L87 Difference]: Start difference. First operand 56 states and 57 transitions. Second operand has 71 states, 71 states have (on average 2.112676056338028) internal successors, (150), 71 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:17,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:58:17,342 INFO L93 Difference]: Finished difference Result 90 states and 91 transitions. [2022-11-26 00:58:17,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-26 00:58:17,342 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 71 states have (on average 2.112676056338028) internal successors, (150), 71 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-26 00:58:17,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:58:17,343 INFO L225 Difference]: With dead ends: 90 [2022-11-26 00:58:17,343 INFO L226 Difference]: Without dead ends: 59 [2022-11-26 00:58:17,344 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 222 GetRequests, 107 SyntacticMatches, 7 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1509 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=500, Invalid=11490, Unknown=0, NotChecked=0, Total=11990 [2022-11-26 00:58:17,345 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 157 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1988 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 1999 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1988 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:58:17,345 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 79 Invalid, 1999 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1988 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-26 00:58:17,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-26 00:58:17,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 58. [2022-11-26 00:58:17,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 56 states have (on average 1.0535714285714286) internal successors, (59), 57 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:17,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 59 transitions. [2022-11-26 00:58:17,347 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 59 transitions. Word has length 53 [2022-11-26 00:58:17,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:58:17,348 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 59 transitions. [2022-11-26 00:58:17,348 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 71 states have (on average 2.112676056338028) internal successors, (150), 71 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:17,348 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 59 transitions. [2022-11-26 00:58:17,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-26 00:58:17,349 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:58:17,349 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2022-11-26 00:58:17,359 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-26 00:58:17,556 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-26 00:58:17,556 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:58:17,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:58:17,556 INFO L85 PathProgramCache]: Analyzing trace with hash -79041809, now seen corresponding path program 19 times [2022-11-26 00:58:17,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:58:17,557 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906062171] [2022-11-26 00:58:17,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:58:17,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:58:17,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:18,388 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 64 proven. 181 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:18,389 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:58:18,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906062171] [2022-11-26 00:58:18,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906062171] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:58:18,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [433603225] [2022-11-26 00:58:18,389 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:58:18,389 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:18,389 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:58:18,391 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:58:18,399 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-26 00:58:18,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:18,639 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-26 00:58:18,642 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:58:19,046 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 81 proven. 164 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:19,046 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:58:19,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 00:58:19,743 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 81 proven. 164 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:19,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [433603225] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:58:19,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1536123755] [2022-11-26 00:58:19,744 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:58:19,745 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:58:19,745 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:58:19,745 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:58:19,745 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:58:19,772 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:19,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:58:19,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:19,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:19,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:19,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:19,937 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:19,967 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:58:19,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:58:20,044 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:20,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:20,098 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:20,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:20,118 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:58:21,797 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10146#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:58:21,797 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:58:21,797 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:58:21,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 24] total 48 [2022-11-26 00:58:21,798 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912319928] [2022-11-26 00:58:21,798 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:58:21,798 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-26 00:58:21,798 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:58:21,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-26 00:58:21,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=2840, Unknown=0, NotChecked=0, Total=3192 [2022-11-26 00:58:21,799 INFO L87 Difference]: Start difference. First operand 58 states and 59 transitions. Second operand has 49 states, 48 states have (on average 2.3541666666666665) internal successors, (113), 49 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:22,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:58:22,602 INFO L93 Difference]: Finished difference Result 63 states and 64 transitions. [2022-11-26 00:58:22,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-26 00:58:22,602 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.3541666666666665) internal successors, (113), 49 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-26 00:58:22,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:58:22,603 INFO L225 Difference]: With dead ends: 63 [2022-11-26 00:58:22,603 INFO L226 Difference]: Without dead ends: 63 [2022-11-26 00:58:22,603 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 120 SyntacticMatches, 11 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1675 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=755, Invalid=4075, Unknown=0, NotChecked=0, Total=4830 [2022-11-26 00:58:22,603 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 293 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 977 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 978 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 977 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:58:22,604 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 3 Invalid, 978 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 977 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:58:22,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-26 00:58:22,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 60. [2022-11-26 00:58:22,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 58 states have (on average 1.0517241379310345) internal successors, (61), 59 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:22,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 61 transitions. [2022-11-26 00:58:22,606 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 61 transitions. Word has length 55 [2022-11-26 00:58:22,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:58:22,606 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 61 transitions. [2022-11-26 00:58:22,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.3541666666666665) internal successors, (113), 49 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:22,606 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 61 transitions. [2022-11-26 00:58:22,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-26 00:58:22,607 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:58:22,607 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2022-11-26 00:58:22,615 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-26 00:58:22,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-26 00:58:22,813 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:58:22,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:58:22,813 INFO L85 PathProgramCache]: Analyzing trace with hash 1844671204, now seen corresponding path program 10 times [2022-11-26 00:58:22,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:58:22,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112045187] [2022-11-26 00:58:22,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:58:22,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:58:22,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:24,163 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 64 proven. 191 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:24,163 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:58:24,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112045187] [2022-11-26 00:58:24,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112045187] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:58:24,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2044218350] [2022-11-26 00:58:24,163 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:58:24,163 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:24,164 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:58:24,164 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:58:24,166 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-26 00:58:24,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:24,404 INFO L263 TraceCheckSpWp]: Trace formula consists of 447 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-26 00:58:24,407 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:58:24,458 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:24,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 00:58:24,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:58:26,454 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 81 proven. 174 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:26,454 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:58:28,280 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:28,362 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 100 proven. 155 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:28,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2044218350] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:58:28,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [687174959] [2022-11-26 00:58:28,363 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:58:28,363 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:58:28,364 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:58:28,364 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:58:28,364 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:58:28,389 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:28,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:58:28,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:58:28,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:28,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:28,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:28,571 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:28,600 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:58:28,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:58:28,703 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:28,780 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-11-26 00:58:28,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-11-26 00:58:28,946 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:28,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:28,999 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:28,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:29,008 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:58:30,574 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10707#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:58:30,574 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:58:30,574 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:58:30,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 23, 25] total 72 [2022-11-26 00:58:30,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029339330] [2022-11-26 00:58:30,575 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:58:30,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-11-26 00:58:30,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:58:30,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-11-26 00:58:30,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=687, Invalid=5955, Unknown=0, NotChecked=0, Total=6642 [2022-11-26 00:58:30,576 INFO L87 Difference]: Start difference. First operand 60 states and 61 transitions. Second operand has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:33,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:58:33,077 INFO L93 Difference]: Finished difference Result 62 states and 63 transitions. [2022-11-26 00:58:33,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-26 00:58:33,077 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-26 00:58:33,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:58:33,078 INFO L225 Difference]: With dead ends: 62 [2022-11-26 00:58:33,078 INFO L226 Difference]: Without dead ends: 62 [2022-11-26 00:58:33,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 110 SyntacticMatches, 0 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2735 ImplicationChecksByTransitivity, 6.8s TimeCoverageRelationStatistics Valid=1700, Invalid=9430, Unknown=0, NotChecked=0, Total=11130 [2022-11-26 00:58:33,079 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 366 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1106 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 366 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:58:33,079 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [366 Valid, 0 Invalid, 1108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1106 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-26 00:58:33,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-26 00:58:33,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 61. [2022-11-26 00:58:33,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 59 states have (on average 1.0508474576271187) internal successors, (62), 60 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:33,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 62 transitions. [2022-11-26 00:58:33,082 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 62 transitions. Word has length 56 [2022-11-26 00:58:33,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:58:33,082 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 62 transitions. [2022-11-26 00:58:33,082 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:33,082 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 62 transitions. [2022-11-26 00:58:33,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-26 00:58:33,083 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:58:33,083 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 1, 1, 1, 1, 1] [2022-11-26 00:58:33,090 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-26 00:58:33,289 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:33,290 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:58:33,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:58:33,290 INFO L85 PathProgramCache]: Analyzing trace with hash -1092465941, now seen corresponding path program 20 times [2022-11-26 00:58:33,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:58:33,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1158709773] [2022-11-26 00:58:33,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:58:33,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:58:33,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:34,751 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 265 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:34,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:58:34,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1158709773] [2022-11-26 00:58:34,751 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1158709773] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:58:34,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [820232535] [2022-11-26 00:58:34,751 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:58:34,752 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:34,752 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:58:34,755 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:58:34,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-26 00:58:35,816 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-11-26 00:58:35,816 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:58:35,823 INFO L263 TraceCheckSpWp]: Trace formula consists of 464 conjuncts, 152 conjunts are in the unsatisfiable core [2022-11-26 00:58:35,828 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:58:35,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:58:36,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:58:36,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:36,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:36,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:36,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:58:37,712 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:37,714 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:58:37,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 00:58:37,719 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 265 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:37,719 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:58:37,775 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-26 00:58:38,166 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-26 00:58:38,280 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-26 00:58:38,290 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-26 00:58:38,394 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:58:38,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:58:38,400 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:58:38,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:58:38,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:58:39,213 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 170 refuted. 0 times theorem prover too weak. 0 trivial. 95 not checked. [2022-11-26 00:58:39,213 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [820232535] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:58:39,213 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [709467832] [2022-11-26 00:58:39,214 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:58:39,214 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:58:39,214 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:58:39,215 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:58:39,215 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:58:39,239 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:39,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:58:39,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:58:39,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:39,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:39,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:39,420 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:39,442 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:58:39,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:58:39,583 INFO L321 Elim1Store]: treesize reduction 165, result has 13.2 percent of original size [2022-11-26 00:58:39,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 219 treesize of output 214 [2022-11-26 00:58:39,672 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:39,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:39,720 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:39,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:39,734 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:58:41,275 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11303#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:58:41,275 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:58:41,275 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:58:41,275 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 28] total 75 [2022-11-26 00:58:41,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1810512103] [2022-11-26 00:58:41,276 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:58:41,276 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-11-26 00:58:41,276 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:58:41,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-11-26 00:58:41,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=252, Invalid=5849, Unknown=77, NotChecked=628, Total=6806 [2022-11-26 00:58:41,277 INFO L87 Difference]: Start difference. First operand 61 states and 62 transitions. Second operand has 75 states, 75 states have (on average 2.2) internal successors, (165), 75 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:43,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:58:43,946 INFO L93 Difference]: Finished difference Result 98 states and 99 transitions. [2022-11-26 00:58:43,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-26 00:58:43,946 INFO L78 Accepts]: Start accepts. Automaton has has 75 states, 75 states have (on average 2.2) internal successors, (165), 75 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-11-26 00:58:43,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:58:43,947 INFO L225 Difference]: With dead ends: 98 [2022-11-26 00:58:43,947 INFO L226 Difference]: Without dead ends: 64 [2022-11-26 00:58:43,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 128 SyntacticMatches, 1 SemanticMatches, 103 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 2260 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=468, Invalid=9570, Unknown=78, NotChecked=804, Total=10920 [2022-11-26 00:58:43,948 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 69 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 2273 mSolverCounterSat, 11 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 2535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 2273 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 241 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-26 00:58:43,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 89 Invalid, 2535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 2273 Invalid, 10 Unknown, 241 Unchecked, 1.3s Time] [2022-11-26 00:58:43,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-26 00:58:43,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 63. [2022-11-26 00:58:43,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 61 states have (on average 1.0491803278688525) internal successors, (64), 62 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:43,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 64 transitions. [2022-11-26 00:58:43,951 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 64 transitions. Word has length 58 [2022-11-26 00:58:43,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:58:43,951 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 64 transitions. [2022-11-26 00:58:43,951 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 75 states, 75 states have (on average 2.2) internal successors, (165), 75 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:43,952 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 64 transitions. [2022-11-26 00:58:43,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-26 00:58:43,952 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:58:43,952 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2022-11-26 00:58:43,959 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-26 00:58:44,159 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:44,159 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:58:44,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:58:44,159 INFO L85 PathProgramCache]: Analyzing trace with hash -1721604620, now seen corresponding path program 21 times [2022-11-26 00:58:44,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:58:44,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320248327] [2022-11-26 00:58:44,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:58:44,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:58:44,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:44,989 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 81 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:44,989 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:58:44,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320248327] [2022-11-26 00:58:44,990 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320248327] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:58:44,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [696936150] [2022-11-26 00:58:44,990 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:58:44,990 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:44,990 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:58:44,995 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:58:45,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-26 00:58:45,972 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:58:45,972 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:58:45,977 INFO L263 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 68 conjunts are in the unsatisfiable core [2022-11-26 00:58:45,979 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:58:45,990 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:58:45,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 00:58:46,419 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 100 proven. 197 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:46,419 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:58:47,481 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 100 proven. 197 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:47,481 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [696936150] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:58:47,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [794907755] [2022-11-26 00:58:47,482 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:58:47,482 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:58:47,482 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:58:47,482 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:58:47,483 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:58:47,504 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:47,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:58:47,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:47,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:47,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:47,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:47,696 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:47,718 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:58:47,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:58:47,783 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:47,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:47,851 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:47,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:47,862 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:58:49,683 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11936#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:58:49,683 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:58:49,683 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:58:49,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 26] total 64 [2022-11-26 00:58:49,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464723742] [2022-11-26 00:58:49,683 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:58:49,684 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2022-11-26 00:58:49,684 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:58:49,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2022-11-26 00:58:49,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=623, Invalid=4633, Unknown=0, NotChecked=0, Total=5256 [2022-11-26 00:58:49,686 INFO L87 Difference]: Start difference. First operand 63 states and 64 transitions. Second operand has 65 states, 64 states have (on average 2.296875) internal successors, (147), 65 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:50,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:58:50,578 INFO L93 Difference]: Finished difference Result 68 states and 69 transitions. [2022-11-26 00:58:50,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-26 00:58:50,578 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 64 states have (on average 2.296875) internal successors, (147), 65 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2022-11-26 00:58:50,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:58:50,579 INFO L225 Difference]: With dead ends: 68 [2022-11-26 00:58:50,579 INFO L226 Difference]: Without dead ends: 68 [2022-11-26 00:58:50,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2202 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=1260, Invalid=6222, Unknown=0, NotChecked=0, Total=7482 [2022-11-26 00:58:50,580 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 273 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1042 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 273 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1043 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1042 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:58:50,580 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [273 Valid, 3 Invalid, 1043 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1042 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:58:50,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-26 00:58:50,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 65. [2022-11-26 00:58:50,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 63 states have (on average 1.0476190476190477) internal successors, (66), 64 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:50,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 66 transitions. [2022-11-26 00:58:50,583 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 66 transitions. Word has length 60 [2022-11-26 00:58:50,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:58:50,583 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 66 transitions. [2022-11-26 00:58:50,583 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 64 states have (on average 2.296875) internal successors, (147), 65 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:58:50,583 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 66 transitions. [2022-11-26 00:58:50,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-26 00:58:50,584 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:58:50,584 INFO L195 NwaCegarLoop]: trace histogram [12, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2022-11-26 00:58:50,590 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-26 00:58:50,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-26 00:58:50,787 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:58:50,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:58:50,787 INFO L85 PathProgramCache]: Analyzing trace with hash -1830135681, now seen corresponding path program 11 times [2022-11-26 00:58:50,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:58:50,787 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127321888] [2022-11-26 00:58:50,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:58:50,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:58:50,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:58:52,161 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 81 proven. 227 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:52,161 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:58:52,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127321888] [2022-11-26 00:58:52,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127321888] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:58:52,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [590183687] [2022-11-26 00:58:52,162 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:58:52,162 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:58:52,162 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:58:52,163 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:58:52,165 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-26 00:58:53,188 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-11-26 00:58:53,188 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:58:53,195 INFO L263 TraceCheckSpWp]: Trace formula consists of 483 conjuncts, 82 conjunts are in the unsatisfiable core [2022-11-26 00:58:53,198 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:58:53,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:58:53,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 00:58:54,881 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 91 proven. 217 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:54,882 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:58:56,622 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:56,691 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 121 proven. 187 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:58:56,692 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [590183687] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:58:56,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1709926917] [2022-11-26 00:58:56,693 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:58:56,693 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:58:56,693 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:58:56,693 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:58:56,694 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:58:56,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:58:56,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:58:56,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:56,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:56,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:56,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:58:56,906 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:58:56,928 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:58:56,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:58:57,044 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:57,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:57,112 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:58:57,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:58:57,132 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:58:59,281 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12546#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:58:59,281 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:58:59,281 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:58:59,281 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 27, 26] total 79 [2022-11-26 00:58:59,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1217644518] [2022-11-26 00:58:59,281 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:58:59,282 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 81 states [2022-11-26 00:58:59,282 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:58:59,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 81 interpolants. [2022-11-26 00:58:59,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=658, Invalid=7174, Unknown=0, NotChecked=0, Total=7832 [2022-11-26 00:58:59,284 INFO L87 Difference]: Start difference. First operand 65 states and 66 transitions. Second operand has 81 states, 80 states have (on average 2.2875) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:03,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:59:03,197 INFO L93 Difference]: Finished difference Result 67 states and 68 transitions. [2022-11-26 00:59:03,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-26 00:59:03,197 INFO L78 Accepts]: Start accepts. Automaton has has 81 states, 80 states have (on average 2.2875) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-11-26 00:59:03,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:59:03,198 INFO L225 Difference]: With dead ends: 67 [2022-11-26 00:59:03,198 INFO L226 Difference]: Without dead ends: 67 [2022-11-26 00:59:03,199 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 123 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3453 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=2221, Invalid=13279, Unknown=0, NotChecked=0, Total=15500 [2022-11-26 00:59:03,199 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 474 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1269 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 474 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1293 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 1269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:59:03,200 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [474 Valid, 0 Invalid, 1293 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 1269 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-26 00:59:03,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-11-26 00:59:03,201 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 66. [2022-11-26 00:59:03,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 64 states have (on average 1.046875) internal successors, (67), 65 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:03,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 67 transitions. [2022-11-26 00:59:03,202 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 67 transitions. Word has length 61 [2022-11-26 00:59:03,202 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:59:03,202 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 67 transitions. [2022-11-26 00:59:03,203 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 81 states, 80 states have (on average 2.2875) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:03,203 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 67 transitions. [2022-11-26 00:59:03,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-26 00:59:03,203 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:59:03,204 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 11, 11, 1, 1, 1, 1, 1] [2022-11-26 00:59:03,211 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-26 00:59:03,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-26 00:59:03,411 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:59:03,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:59:03,411 INFO L85 PathProgramCache]: Analyzing trace with hash -2118765114, now seen corresponding path program 22 times [2022-11-26 00:59:03,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:59:03,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [126295681] [2022-11-26 00:59:03,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:59:03,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:59:03,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:04,774 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 319 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:04,774 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:59:04,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [126295681] [2022-11-26 00:59:04,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [126295681] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:59:04,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1312943329] [2022-11-26 00:59:04,774 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:59:04,775 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:04,775 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:59:04,775 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:59:04,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-26 00:59:05,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:05,053 INFO L263 TraceCheckSpWp]: Trace formula consists of 500 conjuncts, 129 conjunts are in the unsatisfiable core [2022-11-26 00:59:05,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:59:05,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:59:05,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:05,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 00:59:05,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:59:05,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 00:59:06,002 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 319 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:06,002 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:59:06,095 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 00:59:06,104 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 00:59:06,113 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 00:59:06,211 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-26 00:59:06,396 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-26 00:59:06,589 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:59:06,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 00:59:06,595 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:59:06,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 00:59:06,869 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 135 not checked. [2022-11-26 00:59:06,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1312943329] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:59:06,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1190969319] [2022-11-26 00:59:06,871 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:59:06,871 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:59:06,871 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:59:06,871 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:59:06,871 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:59:06,902 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:06,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:59:06,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:06,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:06,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:07,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:07,094 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:07,119 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:59:07,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:59:07,188 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:07,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:07,242 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:07,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:07,256 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:59:08,707 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13189#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:59:08,707 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:59:08,707 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:59:08,708 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 30, 30] total 58 [2022-11-26 00:59:08,708 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [531377991] [2022-11-26 00:59:08,708 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:59:08,708 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-11-26 00:59:08,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:59:08,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-11-26 00:59:08,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=3417, Unknown=87, NotChecked=610, Total=4290 [2022-11-26 00:59:08,709 INFO L87 Difference]: Start difference. First operand 66 states and 67 transitions. Second operand has 58 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 58 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:11,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:59:11,596 INFO L93 Difference]: Finished difference Result 106 states and 107 transitions. [2022-11-26 00:59:11,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-26 00:59:11,596 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 58 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2022-11-26 00:59:11,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:59:11,597 INFO L225 Difference]: With dead ends: 106 [2022-11-26 00:59:11,597 INFO L226 Difference]: Without dead ends: 69 [2022-11-26 00:59:11,598 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 252 GetRequests, 160 SyntacticMatches, 3 SemanticMatches, 89 ConstructedPredicates, 5 IntricatePredicates, 0 DeprecatedPredicates, 1039 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=384, Invalid=6859, Unknown=87, NotChecked=860, Total=8190 [2022-11-26 00:59:11,598 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 112 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 2360 mSolverCounterSat, 12 mSolverCounterUnsat, 90 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 2762 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 2360 IncrementalHoareTripleChecker+Invalid, 90 IncrementalHoareTripleChecker+Unknown, 300 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:59:11,598 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 91 Invalid, 2762 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 2360 Invalid, 90 Unknown, 300 Unchecked, 1.4s Time] [2022-11-26 00:59:11,599 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-26 00:59:11,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 68. [2022-11-26 00:59:11,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 66 states have (on average 1.0454545454545454) internal successors, (69), 67 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:11,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 69 transitions. [2022-11-26 00:59:11,601 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 69 transitions. Word has length 63 [2022-11-26 00:59:11,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:59:11,601 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 69 transitions. [2022-11-26 00:59:11,601 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 58 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:11,601 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 69 transitions. [2022-11-26 00:59:11,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-26 00:59:11,602 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:59:11,602 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 12, 1, 1, 1, 1, 1] [2022-11-26 00:59:11,611 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-26 00:59:11,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-26 00:59:11,802 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:59:11,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:59:11,803 INFO L85 PathProgramCache]: Analyzing trace with hash 1500158045, now seen corresponding path program 23 times [2022-11-26 00:59:11,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:59:11,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [654700707] [2022-11-26 00:59:11,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:59:11,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:59:11,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:12,995 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 100 proven. 254 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:12,995 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:59:12,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [654700707] [2022-11-26 00:59:12,996 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [654700707] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:59:12,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [217827418] [2022-11-26 00:59:12,996 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:59:12,996 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:12,996 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:59:12,999 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:59:13,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-26 00:59:14,069 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 13 check-sat command(s) [2022-11-26 00:59:14,070 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:59:14,075 INFO L263 TraceCheckSpWp]: Trace formula consists of 513 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-26 00:59:14,077 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:59:14,952 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 121 proven. 233 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:14,952 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:59:15,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-26 00:59:16,027 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 121 proven. 233 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:16,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [217827418] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:59:16,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [388259676] [2022-11-26 00:59:16,029 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:59:16,029 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:59:16,029 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:59:16,029 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:59:16,029 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:59:16,055 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:16,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:59:16,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:59:16,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:16,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:16,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:16,214 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:16,236 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:59:16,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:59:16,321 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:16,417 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-11-26 00:59:16,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-11-26 00:59:16,530 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:16,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:16,581 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:16,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:16,592 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:59:17,806 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13874#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:59:17,806 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:59:17,807 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:59:17,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 28, 28] total 68 [2022-11-26 00:59:17,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [245176630] [2022-11-26 00:59:17,807 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:59:17,807 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-11-26 00:59:17,807 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:59:17,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-11-26 00:59:17,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=792, Invalid=5060, Unknown=0, NotChecked=0, Total=5852 [2022-11-26 00:59:17,809 INFO L87 Difference]: Start difference. First operand 68 states and 69 transitions. Second operand has 69 states, 68 states have (on average 2.4558823529411766) internal successors, (167), 69 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:18,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:59:18,893 INFO L93 Difference]: Finished difference Result 73 states and 74 transitions. [2022-11-26 00:59:18,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-26 00:59:18,893 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 68 states have (on average 2.4558823529411766) internal successors, (167), 69 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 65 [2022-11-26 00:59:18,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:59:18,893 INFO L225 Difference]: With dead ends: 73 [2022-11-26 00:59:18,894 INFO L226 Difference]: Without dead ends: 73 [2022-11-26 00:59:18,894 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 132 SyntacticMatches, 13 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3216 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=1443, Invalid=6929, Unknown=0, NotChecked=0, Total=8372 [2022-11-26 00:59:18,894 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 290 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 926 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 927 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 926 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:59:18,895 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 1 Invalid, 927 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 926 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:59:18,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-26 00:59:18,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 70. [2022-11-26 00:59:18,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 68 states have (on average 1.0441176470588236) internal successors, (71), 69 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:18,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 71 transitions. [2022-11-26 00:59:18,897 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 71 transitions. Word has length 65 [2022-11-26 00:59:18,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:59:18,897 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 71 transitions. [2022-11-26 00:59:18,906 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 68 states have (on average 2.4558823529411766) internal successors, (167), 69 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:18,907 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 71 transitions. [2022-11-26 00:59:18,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-26 00:59:18,907 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:59:18,907 INFO L195 NwaCegarLoop]: trace histogram [13, 12, 12, 12, 12, 1, 1, 1, 1, 1] [2022-11-26 00:59:18,914 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-26 00:59:19,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:19,108 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:59:19,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:59:19,108 INFO L85 PathProgramCache]: Analyzing trace with hash -739740874, now seen corresponding path program 12 times [2022-11-26 00:59:19,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:59:19,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039216489] [2022-11-26 00:59:19,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:59:19,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:59:19,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:20,525 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 100 proven. 266 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:20,525 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:59:20,525 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039216489] [2022-11-26 00:59:20,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039216489] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:59:20,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1129979008] [2022-11-26 00:59:20,526 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:59:20,526 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:20,526 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:59:20,527 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:59:20,529 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-26 00:59:21,327 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:59:21,327 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:59:21,333 INFO L263 TraceCheckSpWp]: Trace formula consists of 519 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-26 00:59:21,336 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:59:21,385 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:21,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 00:59:21,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 00:59:23,906 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 121 proven. 245 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:23,907 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:59:26,268 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:26,363 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 144 proven. 222 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:26,363 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1129979008] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:59:26,363 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [936313015] [2022-11-26 00:59:26,364 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:59:26,365 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:59:26,365 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:59:26,365 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:59:26,365 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:59:26,395 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:26,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:59:26,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:59:26,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:26,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:26,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:26,574 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:26,603 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:59:26,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:59:26,682 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:26,760 INFO L321 Elim1Store]: treesize reduction 171, result has 21.9 percent of original size [2022-11-26 00:59:26,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 230 [2022-11-26 00:59:26,874 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:26,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:26,921 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:26,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:26,933 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:59:28,671 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14531#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:59:28,672 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:59:28,672 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:59:28,672 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 27, 29] total 84 [2022-11-26 00:59:28,672 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [468230832] [2022-11-26 00:59:28,672 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:59:28,672 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 86 states [2022-11-26 00:59:28,672 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:59:28,673 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 86 interpolants. [2022-11-26 00:59:28,673 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=901, Invalid=7841, Unknown=0, NotChecked=0, Total=8742 [2022-11-26 00:59:28,673 INFO L87 Difference]: Start difference. First operand 70 states and 71 transitions. Second operand has 86 states, 85 states have (on average 2.3294117647058825) internal successors, (198), 85 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:31,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:59:31,925 INFO L93 Difference]: Finished difference Result 72 states and 73 transitions. [2022-11-26 00:59:31,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-26 00:59:31,925 INFO L78 Accepts]: Start accepts. Automaton has has 86 states, 85 states have (on average 2.3294117647058825) internal successors, (198), 85 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-11-26 00:59:31,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:59:31,926 INFO L225 Difference]: With dead ends: 72 [2022-11-26 00:59:31,926 INFO L226 Difference]: Without dead ends: 72 [2022-11-26 00:59:31,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 252 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 120 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3656 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=2265, Invalid=12497, Unknown=0, NotChecked=0, Total=14762 [2022-11-26 00:59:31,927 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 378 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1372 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 378 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1372 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:59:31,927 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [378 Valid, 0 Invalid, 1374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1372 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-26 00:59:31,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-11-26 00:59:31,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 71. [2022-11-26 00:59:31,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 69 states have (on average 1.0434782608695652) internal successors, (72), 70 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:31,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 72 transitions. [2022-11-26 00:59:31,929 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 72 transitions. Word has length 66 [2022-11-26 00:59:31,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:59:31,929 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 72 transitions. [2022-11-26 00:59:31,930 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 86 states, 85 states have (on average 2.3294117647058825) internal successors, (198), 85 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:31,930 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 72 transitions. [2022-11-26 00:59:31,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-26 00:59:31,930 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:59:31,931 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 12, 12, 1, 1, 1, 1, 1] [2022-11-26 00:59:31,943 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-26 00:59:32,139 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable46,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:32,139 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:59:32,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:59:32,139 INFO L85 PathProgramCache]: Analyzing trace with hash 2073591485, now seen corresponding path program 24 times [2022-11-26 00:59:32,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:59:32,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [245274896] [2022-11-26 00:59:32,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:59:32,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:59:32,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:33,825 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 13 proven. 378 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:33,825 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:59:33,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [245274896] [2022-11-26 00:59:33,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [245274896] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:59:33,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [129936613] [2022-11-26 00:59:33,825 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:59:33,825 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:33,826 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:59:33,826 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:59:33,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-26 00:59:34,741 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:59:34,741 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:59:34,748 INFO L263 TraceCheckSpWp]: Trace formula consists of 536 conjuncts, 157 conjunts are in the unsatisfiable core [2022-11-26 00:59:34,753 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:59:35,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:35,642 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:35,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:35,752 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:35,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:35,868 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:35,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:35,985 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:35,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,105 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,226 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,346 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,471 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,617 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,764 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:36,895 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:36,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:37,027 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:37,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 00:59:37,237 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:37,239 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 00:59:37,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-26 00:59:37,243 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 13 proven. 378 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:37,244 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:59:41,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 167 treesize of output 161 [2022-11-26 00:59:43,327 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 13 proven. 378 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:43,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [129936613] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:59:43,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1933189274] [2022-11-26 00:59:43,329 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:59:43,329 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:59:43,329 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:59:43,330 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:59:43,330 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:59:43,357 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:43,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:59:43,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:59:43,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:43,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:43,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:43,522 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:43,551 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:59:43,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:59:43,634 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:43,726 INFO L321 Elim1Store]: treesize reduction 171, result has 21.9 percent of original size [2022-11-26 00:59:43,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 230 [2022-11-26 00:59:43,965 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:43,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:44,016 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:44,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:44,025 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:59:46,052 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15229#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:59:46,052 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:59:46,052 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:59:46,052 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 32, 33] total 89 [2022-11-26 00:59:46,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1319255492] [2022-11-26 00:59:46,052 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:59:46,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 89 states [2022-11-26 00:59:46,053 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:59:46,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 89 interpolants. [2022-11-26 00:59:46,054 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=259, Invalid=9053, Unknown=0, NotChecked=0, Total=9312 [2022-11-26 00:59:46,054 INFO L87 Difference]: Start difference. First operand 71 states and 72 transitions. Second operand has 89 states, 89 states have (on average 2.191011235955056) internal successors, (195), 89 states have internal predecessors, (195), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:52,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:59:52,209 INFO L93 Difference]: Finished difference Result 114 states and 115 transitions. [2022-11-26 00:59:52,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-11-26 00:59:52,209 INFO L78 Accepts]: Start accepts. Automaton has has 89 states, 89 states have (on average 2.191011235955056) internal successors, (195), 89 states have internal predecessors, (195), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-11-26 00:59:52,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:59:52,210 INFO L225 Difference]: With dead ends: 114 [2022-11-26 00:59:52,210 INFO L226 Difference]: Without dead ends: 74 [2022-11-26 00:59:52,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 285 GetRequests, 140 SyntacticMatches, 10 SemanticMatches, 135 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2205 ImplicationChecksByTransitivity, 14.0s TimeCoverageRelationStatistics Valid=623, Invalid=18009, Unknown=0, NotChecked=0, Total=18632 [2022-11-26 00:59:52,212 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 242 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 3993 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 4008 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 3993 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:59:52,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 109 Invalid, 4008 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 3993 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-26 00:59:52,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-11-26 00:59:52,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 73. [2022-11-26 00:59:52,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 71 states have (on average 1.0422535211267605) internal successors, (74), 72 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:52,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 74 transitions. [2022-11-26 00:59:52,214 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 74 transitions. Word has length 68 [2022-11-26 00:59:52,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:59:52,215 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 74 transitions. [2022-11-26 00:59:52,215 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 89 states, 89 states have (on average 2.191011235955056) internal successors, (195), 89 states have internal predecessors, (195), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:52,215 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 74 transitions. [2022-11-26 00:59:52,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-11-26 00:59:52,216 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:59:52,216 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 13, 13, 1, 1, 1, 1, 1] [2022-11-26 00:59:52,224 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-26 00:59:52,423 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-26 00:59:52,423 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:59:52,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:59:52,423 INFO L85 PathProgramCache]: Analyzing trace with hash -1862458746, now seen corresponding path program 25 times [2022-11-26 00:59:52,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:59:52,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227382314] [2022-11-26 00:59:52,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:59:52,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:59:52,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:53,435 INFO L134 CoverageAnalysis]: Checked inductivity of 416 backedges. 121 proven. 295 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:53,435 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:59:53,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227382314] [2022-11-26 00:59:53,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227382314] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:59:53,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1712150288] [2022-11-26 00:59:53,435 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:59:53,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:59:53,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:59:53,439 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:59:53,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-26 00:59:53,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:59:53,736 INFO L263 TraceCheckSpWp]: Trace formula consists of 549 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-26 00:59:53,738 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:59:54,273 INFO L134 CoverageAnalysis]: Checked inductivity of 416 backedges. 144 proven. 272 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:54,273 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:59:54,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 00:59:55,303 INFO L134 CoverageAnalysis]: Checked inductivity of 416 backedges. 144 proven. 272 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:59:55,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1712150288] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:59:55,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [247241950] [2022-11-26 00:59:55,305 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 00:59:55,305 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:59:55,305 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:59:55,305 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:59:55,305 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:59:55,332 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:59:55,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 00:59:55,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:59:55,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:55,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:55,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:59:55,515 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:59:55,538 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 00:59:55,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 00:59:55,699 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-11-26 00:59:55,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-11-26 00:59:55,936 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:55,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:55,992 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 00:59:55,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 00:59:56,004 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:59:57,223 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15979#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 00:59:57,223 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:59:57,224 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 00:59:57,224 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 30, 30] total 60 [2022-11-26 00:59:57,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [879470864] [2022-11-26 00:59:57,224 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 00:59:57,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-26 00:59:57,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:59:57,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-26 00:59:57,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=517, Invalid=4175, Unknown=0, NotChecked=0, Total=4692 [2022-11-26 00:59:57,225 INFO L87 Difference]: Start difference. First operand 73 states and 74 transitions. Second operand has 61 states, 60 states have (on average 2.3833333333333333) internal successors, (143), 61 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:58,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:59:58,414 INFO L93 Difference]: Finished difference Result 78 states and 79 transitions. [2022-11-26 00:59:58,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-26 00:59:58,414 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 60 states have (on average 2.3833333333333333) internal successors, (143), 61 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-11-26 00:59:58,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:59:58,415 INFO L225 Difference]: With dead ends: 78 [2022-11-26 00:59:58,415 INFO L226 Difference]: Without dead ends: 78 [2022-11-26 00:59:58,415 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 253 GetRequests, 156 SyntacticMatches, 14 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2575 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=1133, Invalid=6007, Unknown=0, NotChecked=0, Total=7140 [2022-11-26 00:59:58,415 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 355 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1505 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 355 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1506 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1505 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:59:58,416 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [355 Valid, 3 Invalid, 1506 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1505 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-26 00:59:58,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-26 00:59:58,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 75. [2022-11-26 00:59:58,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 73 states have (on average 1.0410958904109588) internal successors, (76), 74 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:58,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 76 transitions. [2022-11-26 00:59:58,417 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 76 transitions. Word has length 70 [2022-11-26 00:59:58,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:59:58,418 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 76 transitions. [2022-11-26 00:59:58,418 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 60 states have (on average 2.3833333333333333) internal successors, (143), 61 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:59:58,418 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 76 transitions. [2022-11-26 00:59:58,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-26 00:59:58,419 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:59:58,419 INFO L195 NwaCegarLoop]: trace histogram [14, 13, 13, 13, 13, 1, 1, 1, 1, 1] [2022-11-26 00:59:58,427 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-26 00:59:58,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-26 00:59:58,626 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 00:59:58,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:59:58,626 INFO L85 PathProgramCache]: Analyzing trace with hash -1901646291, now seen corresponding path program 13 times [2022-11-26 00:59:58,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:59:58,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262918941] [2022-11-26 00:59:58,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:59:58,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:59:58,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:00,177 INFO L134 CoverageAnalysis]: Checked inductivity of 429 backedges. 121 proven. 308 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:00,178 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:00:00,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1262918941] [2022-11-26 01:00:00,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1262918941] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:00:00,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1719977018] [2022-11-26 01:00:00,178 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:00:00,178 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:00,178 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:00:00,179 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:00:00,181 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-26 01:00:00,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:00,501 INFO L263 TraceCheckSpWp]: Trace formula consists of 555 conjuncts, 89 conjunts are in the unsatisfiable core [2022-11-26 01:00:00,503 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:00:00,557 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:00:00,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 01:00:00,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:00:02,454 INFO L134 CoverageAnalysis]: Checked inductivity of 429 backedges. 144 proven. 285 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:02,454 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:00:04,668 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:04,754 INFO L134 CoverageAnalysis]: Checked inductivity of 429 backedges. 169 proven. 260 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:04,754 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1719977018] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:00:04,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [819796234] [2022-11-26 01:00:04,755 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:00:04,756 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:00:04,756 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:00:04,756 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:00:04,756 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:00:04,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:00:04,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:00:04,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:00:04,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:04,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:04,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:04,967 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:04,989 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:00:04,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:00:05,082 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:05,175 INFO L321 Elim1Store]: treesize reduction 167, result has 20.9 percent of original size [2022-11-26 01:00:05,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-11-26 01:00:05,330 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:05,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:05,379 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:05,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:05,390 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:00:07,156 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16684#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:00:07,156 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:00:07,156 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:00:07,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 30, 30] total 90 [2022-11-26 01:00:07,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [944863688] [2022-11-26 01:00:07,157 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:00:07,157 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 92 states [2022-11-26 01:00:07,158 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:00:07,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 92 interpolants. [2022-11-26 01:00:07,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=717, Invalid=9183, Unknown=0, NotChecked=0, Total=9900 [2022-11-26 01:00:07,159 INFO L87 Difference]: Start difference. First operand 75 states and 76 transitions. Second operand has 92 states, 91 states have (on average 2.340659340659341) internal successors, (213), 91 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:10,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:00:10,771 INFO L93 Difference]: Finished difference Result 77 states and 78 transitions. [2022-11-26 01:00:10,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-26 01:00:10,772 INFO L78 Accepts]: Start accepts. Automaton has has 92 states, 91 states have (on average 2.340659340659341) internal successors, (213), 91 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-11-26 01:00:10,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:00:10,772 INFO L225 Difference]: With dead ends: 77 [2022-11-26 01:00:10,772 INFO L226 Difference]: Without dead ends: 77 [2022-11-26 01:00:10,773 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 270 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3846 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=2203, Invalid=14309, Unknown=0, NotChecked=0, Total=16512 [2022-11-26 01:00:10,773 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 599 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2432 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 599 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2442 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 2432 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-26 01:00:10,773 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [599 Valid, 0 Invalid, 2442 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 2432 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-26 01:00:10,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-26 01:00:10,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 76. [2022-11-26 01:00:10,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 74 states have (on average 1.0405405405405406) internal successors, (77), 75 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:10,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 77 transitions. [2022-11-26 01:00:10,776 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 77 transitions. Word has length 71 [2022-11-26 01:00:10,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:00:10,776 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 77 transitions. [2022-11-26 01:00:10,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 92 states, 91 states have (on average 2.340659340659341) internal successors, (213), 91 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:10,777 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 77 transitions. [2022-11-26 01:00:10,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-26 01:00:10,777 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:00:10,777 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 14, 13, 13, 1, 1, 1, 1, 1] [2022-11-26 01:00:10,787 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-26 01:00:10,984 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-26 01:00:10,984 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:00:10,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:00:10,984 INFO L85 PathProgramCache]: Analyzing trace with hash -2120984588, now seen corresponding path program 26 times [2022-11-26 01:00:10,985 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:00:10,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1234540055] [2022-11-26 01:00:10,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:00:10,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:00:11,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:12,722 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 14 proven. 442 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:12,722 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:00:12,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1234540055] [2022-11-26 01:00:12,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1234540055] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:00:12,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1428332435] [2022-11-26 01:00:12,723 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:00:12,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:12,723 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:00:12,724 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:00:12,747 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-26 01:00:16,936 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 15 check-sat command(s) [2022-11-26 01:00:16,936 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:00:16,947 INFO L263 TraceCheckSpWp]: Trace formula consists of 572 conjuncts, 151 conjunts are in the unsatisfiable core [2022-11-26 01:00:16,951 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:00:16,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:00:17,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:17,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 01:00:17,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:17,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:18,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:18,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 01:00:18,024 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 14 proven. 442 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:18,024 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:00:18,677 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-11-26 01:00:18,902 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2022-11-26 01:00:19,024 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-11-26 01:00:19,034 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-11-26 01:00:19,045 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:00:19,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 01:00:19,051 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:00:19,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 01:00:19,372 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 14 proven. 304 refuted. 0 times theorem prover too weak. 0 trivial. 138 not checked. [2022-11-26 01:00:19,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1428332435] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:00:19,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1176083582] [2022-11-26 01:00:19,373 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:00:19,373 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:00:19,373 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:00:19,374 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:00:19,374 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:00:19,396 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:00:19,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:00:19,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:19,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:19,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:19,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:19,570 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:19,599 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:00:19,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:00:19,679 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:19,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:19,729 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:19,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:19,739 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:00:21,287 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17401#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:00:21,288 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:00:21,288 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:00:21,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 33, 34] total 66 [2022-11-26 01:00:21,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [392316836] [2022-11-26 01:00:21,288 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:00:21,288 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-26 01:00:21,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:00:21,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-26 01:00:21,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=196, Invalid=4489, Unknown=161, NotChecked=556, Total=5402 [2022-11-26 01:00:21,289 INFO L87 Difference]: Start difference. First operand 76 states and 77 transitions. Second operand has 66 states, 66 states have (on average 2.242424242424242) internal successors, (148), 66 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:24,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:00:24,082 INFO L93 Difference]: Finished difference Result 122 states and 123 transitions. [2022-11-26 01:00:24,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-26 01:00:24,083 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 2.242424242424242) internal successors, (148), 66 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-11-26 01:00:24,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:00:24,084 INFO L225 Difference]: With dead ends: 122 [2022-11-26 01:00:24,084 INFO L226 Difference]: Without dead ends: 79 [2022-11-26 01:00:24,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 188 SyntacticMatches, 6 SemanticMatches, 89 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 1100 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=299, Invalid=7035, Unknown=164, NotChecked=692, Total=8190 [2022-11-26 01:00:24,085 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 12 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 3236 mSolverCounterSat, 14 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 3549 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 3236 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 298 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-26 01:00:24,085 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 97 Invalid, 3549 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 3236 Invalid, 1 Unknown, 298 Unchecked, 1.6s Time] [2022-11-26 01:00:24,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-26 01:00:24,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2022-11-26 01:00:24,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 76 states have (on average 1.0394736842105263) internal successors, (79), 77 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:24,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 79 transitions. [2022-11-26 01:00:24,087 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 79 transitions. Word has length 73 [2022-11-26 01:00:24,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:00:24,087 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 79 transitions. [2022-11-26 01:00:24,088 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 2.242424242424242) internal successors, (148), 66 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:24,088 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 79 transitions. [2022-11-26 01:00:24,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-11-26 01:00:24,088 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:00:24,088 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 14, 14, 14, 1, 1, 1, 1, 1] [2022-11-26 01:00:24,097 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-26 01:00:24,288 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:24,289 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:00:24,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:00:24,289 INFO L85 PathProgramCache]: Analyzing trace with hash -1482970677, now seen corresponding path program 27 times [2022-11-26 01:00:24,289 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:00:24,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649506981] [2022-11-26 01:00:24,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:00:24,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:00:24,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:25,401 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 144 proven. 339 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:25,401 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:00:25,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649506981] [2022-11-26 01:00:25,401 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649506981] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:00:25,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1696913391] [2022-11-26 01:00:25,402 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:00:25,402 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:25,402 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:00:25,407 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:00:25,408 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-26 01:00:26,707 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:00:26,707 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:00:26,714 INFO L263 TraceCheckSpWp]: Trace formula consists of 585 conjuncts, 83 conjunts are in the unsatisfiable core [2022-11-26 01:00:26,717 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:00:26,730 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 01:00:26,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 01:00:27,335 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 169 proven. 314 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:27,335 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:00:28,865 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 169 proven. 314 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:28,865 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1696913391] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:00:28,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [12084027] [2022-11-26 01:00:28,866 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:00:28,866 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:00:28,867 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:00:28,867 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:00:28,867 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:00:28,891 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:00:28,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:00:28,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:28,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:28,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:29,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:29,076 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:29,099 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:00:29,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:00:29,161 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:29,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:29,204 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:29,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:29,215 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:00:30,664 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18170#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:00:30,664 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:00:30,665 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:00:30,665 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 32, 32] total 79 [2022-11-26 01:00:30,665 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [305612253] [2022-11-26 01:00:30,665 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:00:30,665 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-11-26 01:00:30,665 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:00:30,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-11-26 01:00:30,666 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=920, Invalid=6736, Unknown=0, NotChecked=0, Total=7656 [2022-11-26 01:00:30,667 INFO L87 Difference]: Start difference. First operand 78 states and 79 transitions. Second operand has 80 states, 79 states have (on average 2.3164556962025316) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:32,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:00:32,085 INFO L93 Difference]: Finished difference Result 83 states and 84 transitions. [2022-11-26 01:00:32,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-26 01:00:32,085 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 79 states have (on average 2.3164556962025316) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-11-26 01:00:32,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:00:32,086 INFO L225 Difference]: With dead ends: 83 [2022-11-26 01:00:32,086 INFO L226 Difference]: Without dead ends: 83 [2022-11-26 01:00:32,087 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3270 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=1872, Invalid=9048, Unknown=0, NotChecked=0, Total=10920 [2022-11-26 01:00:32,087 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 536 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1831 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 536 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1832 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1831 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-26 01:00:32,088 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [536 Valid, 3 Invalid, 1832 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1831 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-26 01:00:32,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-26 01:00:32,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 80. [2022-11-26 01:00:32,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 78 states have (on average 1.0384615384615385) internal successors, (81), 79 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:32,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 81 transitions. [2022-11-26 01:00:32,090 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 81 transitions. Word has length 75 [2022-11-26 01:00:32,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:00:32,091 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 81 transitions. [2022-11-26 01:00:32,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 79 states have (on average 2.3164556962025316) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:32,091 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 81 transitions. [2022-11-26 01:00:32,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-11-26 01:00:32,092 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:00:32,092 INFO L195 NwaCegarLoop]: trace histogram [15, 14, 14, 14, 14, 1, 1, 1, 1, 1] [2022-11-26 01:00:32,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Forceful destruction successful, exit code 0 [2022-11-26 01:00:32,300 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:32,300 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:00:32,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:00:32,300 INFO L85 PathProgramCache]: Analyzing trace with hash 1272549256, now seen corresponding path program 14 times [2022-11-26 01:00:32,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:00:32,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1310437781] [2022-11-26 01:00:32,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:00:32,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:00:32,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:33,893 INFO L134 CoverageAnalysis]: Checked inductivity of 497 backedges. 144 proven. 353 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:33,894 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:00:33,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1310437781] [2022-11-26 01:00:33,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1310437781] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:00:33,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1285847733] [2022-11-26 01:00:33,894 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:00:33,894 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:33,894 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:00:33,895 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:00:33,899 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-26 01:00:37,231 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 15 check-sat command(s) [2022-11-26 01:00:37,231 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:00:37,241 INFO L263 TraceCheckSpWp]: Trace formula consists of 591 conjuncts, 157 conjunts are in the unsatisfiable core [2022-11-26 01:00:37,245 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:00:37,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:00:37,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 01:00:39,759 INFO L134 CoverageAnalysis]: Checked inductivity of 497 backedges. 0 proven. 497 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:39,759 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:00:42,355 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:42,437 INFO L134 CoverageAnalysis]: Checked inductivity of 497 backedges. 40 proven. 457 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:42,438 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1285847733] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:00:42,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1802607355] [2022-11-26 01:00:42,439 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:00:42,439 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:00:42,439 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:00:42,439 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:00:42,440 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:00:42,471 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:00:42,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:00:42,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:00:42,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:42,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:42,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:42,637 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:42,660 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:00:42,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:00:42,762 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:42,840 INFO L321 Elim1Store]: treesize reduction 171, result has 21.9 percent of original size [2022-11-26 01:00:42,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 230 [2022-11-26 01:00:42,969 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:42,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:43,043 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:43,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:43,058 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:00:44,756 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18922#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:00:44,756 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:00:44,756 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:00:44,756 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [32, 31, 32] total 95 [2022-11-26 01:00:44,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [961314834] [2022-11-26 01:00:44,756 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:00:44,757 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2022-11-26 01:00:44,757 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:00:44,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2022-11-26 01:00:44,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=838, Invalid=10082, Unknown=0, NotChecked=0, Total=10920 [2022-11-26 01:00:44,758 INFO L87 Difference]: Start difference. First operand 80 states and 81 transitions. Second operand has 97 states, 96 states have (on average 2.375) internal successors, (228), 96 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:48,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:00:48,380 INFO L93 Difference]: Finished difference Result 83 states and 84 transitions. [2022-11-26 01:00:48,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-26 01:00:48,380 INFO L78 Accepts]: Start accepts. Automaton has has 97 states, 96 states have (on average 2.375) internal successors, (228), 96 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 76 [2022-11-26 01:00:48,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:00:48,380 INFO L225 Difference]: With dead ends: 83 [2022-11-26 01:00:48,380 INFO L226 Difference]: Without dead ends: 83 [2022-11-26 01:00:48,381 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 135 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5284 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=1949, Invalid=16683, Unknown=0, NotChecked=0, Total=18632 [2022-11-26 01:00:48,382 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 481 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2989 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2990 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2989 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-26 01:00:48,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [481 Valid, 0 Invalid, 2990 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2989 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-26 01:00:48,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-26 01:00:48,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 81. [2022-11-26 01:00:48,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 79 states have (on average 1.0379746835443038) internal successors, (82), 80 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:48,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 82 transitions. [2022-11-26 01:00:48,396 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 82 transitions. Word has length 76 [2022-11-26 01:00:48,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:00:48,396 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 82 transitions. [2022-11-26 01:00:48,396 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 97 states, 96 states have (on average 2.375) internal successors, (228), 96 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:48,397 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 82 transitions. [2022-11-26 01:00:48,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2022-11-26 01:00:48,397 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:00:48,397 INFO L195 NwaCegarLoop]: trace histogram [15, 15, 15, 14, 14, 1, 1, 1, 1, 1] [2022-11-26 01:00:48,407 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Ended with exit code 0 [2022-11-26 01:00:48,603 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:48,603 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:00:48,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:00:48,604 INFO L85 PathProgramCache]: Analyzing trace with hash -1145844081, now seen corresponding path program 28 times [2022-11-26 01:00:48,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:00:48,604 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77359063] [2022-11-26 01:00:48,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:00:48,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:00:48,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:50,682 INFO L134 CoverageAnalysis]: Checked inductivity of 526 backedges. 15 proven. 511 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:50,682 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:00:50,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77359063] [2022-11-26 01:00:50,682 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77359063] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:00:50,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [567748772] [2022-11-26 01:00:50,682 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:00:50,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:00:50,683 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:00:50,683 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:00:50,686 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-26 01:00:51,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:00:51,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 608 conjuncts, 156 conjunts are in the unsatisfiable core [2022-11-26 01:00:51,030 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:00:51,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:00:51,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:51,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 01:00:52,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:00:52,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 01:00:52,251 INFO L134 CoverageAnalysis]: Checked inductivity of 526 backedges. 15 proven. 511 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:00:52,251 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:00:52,373 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 01:00:52,382 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 01:00:52,500 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-11-26 01:00:52,510 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-26 01:00:52,987 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-11-26 01:00:53,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-26 01:00:53,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 01:00:53,636 INFO L134 CoverageAnalysis]: Checked inductivity of 526 backedges. 15 proven. 331 refuted. 0 times theorem prover too weak. 0 trivial. 180 not checked. [2022-11-26 01:00:53,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [567748772] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:00:53,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1107191000] [2022-11-26 01:00:53,638 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:00:53,638 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:00:53,638 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:00:53,639 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:00:53,639 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:00:53,668 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:00:53,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:00:53,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:53,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:53,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:53,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:00:53,851 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:00:53,874 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:00:53,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:00:53,949 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:53,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:53,997 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:00:53,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:00:54,005 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:00:55,584 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19688#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:00:55,584 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:00:55,584 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:00:55,584 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 36, 36] total 68 [2022-11-26 01:00:55,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680158980] [2022-11-26 01:00:55,585 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:00:55,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-26 01:00:55,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:00:55,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-26 01:00:55,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=4686, Unknown=103, NotChecked=710, Total=5700 [2022-11-26 01:00:55,588 INFO L87 Difference]: Start difference. First operand 81 states and 82 transitions. Second operand has 68 states, 68 states have (on average 2.264705882352941) internal successors, (154), 68 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:59,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:00:59,268 INFO L93 Difference]: Finished difference Result 130 states and 131 transitions. [2022-11-26 01:00:59,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-26 01:00:59,268 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 68 states have (on average 2.264705882352941) internal successors, (154), 68 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 78 [2022-11-26 01:00:59,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:00:59,269 INFO L225 Difference]: With dead ends: 130 [2022-11-26 01:00:59,269 INFO L226 Difference]: Without dead ends: 84 [2022-11-26 01:00:59,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 312 GetRequests, 200 SyntacticMatches, 7 SemanticMatches, 105 ConstructedPredicates, 5 IntricatePredicates, 1 DeprecatedPredicates, 1512 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=455, Invalid=9764, Unknown=103, NotChecked=1020, Total=11342 [2022-11-26 01:00:59,270 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 187 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 3011 mSolverCounterSat, 15 mSolverCounterUnsat, 43 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 3466 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 3011 IncrementalHoareTripleChecker+Invalid, 43 IncrementalHoareTripleChecker+Unknown, 397 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-26 01:00:59,270 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 77 Invalid, 3466 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 3011 Invalid, 43 Unknown, 397 Unchecked, 1.7s Time] [2022-11-26 01:00:59,270 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-26 01:00:59,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 83. [2022-11-26 01:00:59,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 81 states have (on average 1.037037037037037) internal successors, (84), 82 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:59,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 84 transitions. [2022-11-26 01:00:59,272 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 84 transitions. Word has length 78 [2022-11-26 01:00:59,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:00:59,273 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 84 transitions. [2022-11-26 01:00:59,273 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 68 states have (on average 2.264705882352941) internal successors, (154), 68 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:00:59,273 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 84 transitions. [2022-11-26 01:00:59,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-11-26 01:00:59,274 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:00:59,274 INFO L195 NwaCegarLoop]: trace histogram [15, 15, 15, 15, 15, 1, 1, 1, 1, 1] [2022-11-26 01:00:59,280 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Forceful destruction successful, exit code 0 [2022-11-26 01:00:59,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-11-26 01:00:59,479 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:00:59,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:00:59,479 INFO L85 PathProgramCache]: Analyzing trace with hash -377943272, now seen corresponding path program 29 times [2022-11-26 01:00:59,479 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:00:59,479 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1859929871] [2022-11-26 01:00:59,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:00:59,480 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:00:59,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:01:00,870 INFO L134 CoverageAnalysis]: Checked inductivity of 555 backedges. 169 proven. 386 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:00,870 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:01:00,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1859929871] [2022-11-26 01:01:00,870 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1859929871] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:01:00,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1724545510] [2022-11-26 01:01:00,870 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:01:00,871 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:01:00,871 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:01:00,872 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:01:00,874 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-26 01:01:05,449 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 16 check-sat command(s) [2022-11-26 01:01:05,449 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:01:05,460 INFO L263 TraceCheckSpWp]: Trace formula consists of 621 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-26 01:01:05,461 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:01:06,710 INFO L134 CoverageAnalysis]: Checked inductivity of 555 backedges. 196 proven. 359 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:06,710 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:01:07,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-26 01:01:08,253 INFO L134 CoverageAnalysis]: Checked inductivity of 555 backedges. 196 proven. 359 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:08,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1724545510] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:01:08,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1545866321] [2022-11-26 01:01:08,255 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:01:08,255 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:01:08,255 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:01:08,255 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:01:08,255 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:01:08,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:08,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:01:08,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:08,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:08,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:08,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:08,473 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:01:08,498 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:01:08,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:01:08,607 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:01:08,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:01:08,657 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:01:08,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:01:08,670 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:01:10,050 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20529#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:01:10,050 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:01:10,050 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:01:10,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 34, 34] total 83 [2022-11-26 01:01:10,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2012512490] [2022-11-26 01:01:10,050 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:01:10,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 84 states [2022-11-26 01:01:10,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:01:10,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 84 interpolants. [2022-11-26 01:01:10,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1155, Invalid=7217, Unknown=0, NotChecked=0, Total=8372 [2022-11-26 01:01:10,053 INFO L87 Difference]: Start difference. First operand 83 states and 84 transitions. Second operand has 84 states, 83 states have (on average 2.4819277108433737) internal successors, (206), 84 states have internal predecessors, (206), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:01:11,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:01:11,501 INFO L93 Difference]: Finished difference Result 88 states and 89 transitions. [2022-11-26 01:01:11,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-26 01:01:11,501 INFO L78 Accepts]: Start accepts. Automaton has has 84 states, 83 states have (on average 2.4819277108433737) internal successors, (206), 84 states have internal predecessors, (206), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 80 [2022-11-26 01:01:11,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:01:11,502 INFO L225 Difference]: With dead ends: 88 [2022-11-26 01:01:11,502 INFO L226 Difference]: Without dead ends: 88 [2022-11-26 01:01:11,503 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 165 SyntacticMatches, 16 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4710 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=2100, Invalid=9890, Unknown=0, NotChecked=0, Total=11990 [2022-11-26 01:01:11,503 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 516 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1215 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 516 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 1216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-26 01:01:11,503 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [516 Valid, 1 Invalid, 1216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1215 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-26 01:01:11,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-11-26 01:01:11,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 85. [2022-11-26 01:01:11,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 83 states have (on average 1.036144578313253) internal successors, (86), 84 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:01:11,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 86 transitions. [2022-11-26 01:01:11,505 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 86 transitions. Word has length 80 [2022-11-26 01:01:11,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:01:11,505 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 86 transitions. [2022-11-26 01:01:11,505 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 84 states, 83 states have (on average 2.4819277108433737) internal successors, (206), 84 states have internal predecessors, (206), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:01:11,505 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 86 transitions. [2022-11-26 01:01:11,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-11-26 01:01:11,505 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:01:11,506 INFO L195 NwaCegarLoop]: trace histogram [16, 15, 15, 15, 15, 1, 1, 1, 1, 1] [2022-11-26 01:01:11,514 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-11-26 01:01:11,706 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-11-26 01:01:11,706 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:01:11,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:01:11,706 INFO L85 PathProgramCache]: Analyzing trace with hash 1168660443, now seen corresponding path program 15 times [2022-11-26 01:01:11,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:01:11,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728020478] [2022-11-26 01:01:11,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:01:11,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:01:11,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:01:13,514 INFO L134 CoverageAnalysis]: Checked inductivity of 570 backedges. 169 proven. 401 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:13,514 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:01:13,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728020478] [2022-11-26 01:01:13,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728020478] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:01:13,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1499164438] [2022-11-26 01:01:13,515 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:01:13,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:01:13,515 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:01:13,516 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:01:13,518 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-26 01:01:14,569 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:01:14,570 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:01:14,577 INFO L263 TraceCheckSpWp]: Trace formula consists of 627 conjuncts, 140 conjunts are in the unsatisfiable core [2022-11-26 01:01:14,581 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:01:14,637 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:14,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 01:01:14,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:01:18,248 INFO L134 CoverageAnalysis]: Checked inductivity of 570 backedges. 196 proven. 374 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:18,248 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:01:21,442 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:01:21,556 INFO L134 CoverageAnalysis]: Checked inductivity of 570 backedges. 225 proven. 345 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:21,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1499164438] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:01:21,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [311290434] [2022-11-26 01:01:21,557 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:01:21,557 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:01:21,557 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:01:21,557 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:01:21,558 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:01:21,584 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:21,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:01:21,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:21,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:21,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:21,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:21,775 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:01:21,804 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:01:21,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:01:21,887 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:01:21,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:01:21,945 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:01:21,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:01:21,964 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:01:24,576 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21329#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:01:24,576 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:01:24,576 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:01:24,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [34, 33, 34] total 101 [2022-11-26 01:01:24,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655335357] [2022-11-26 01:01:24,577 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:01:24,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 103 states [2022-11-26 01:01:24,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:01:24,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 103 interpolants. [2022-11-26 01:01:24,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1128, Invalid=11082, Unknown=0, NotChecked=0, Total=12210 [2022-11-26 01:01:24,579 INFO L87 Difference]: Start difference. First operand 85 states and 86 transitions. Second operand has 103 states, 102 states have (on average 2.3823529411764706) internal successors, (243), 102 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:01:29,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:01:29,490 INFO L93 Difference]: Finished difference Result 87 states and 88 transitions. [2022-11-26 01:01:29,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-26 01:01:29,490 INFO L78 Accepts]: Start accepts. Automaton has has 103 states, 102 states have (on average 2.3823529411764706) internal successors, (243), 102 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 81 [2022-11-26 01:01:29,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:01:29,491 INFO L225 Difference]: With dead ends: 87 [2022-11-26 01:01:29,491 INFO L226 Difference]: Without dead ends: 87 [2022-11-26 01:01:29,492 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 308 GetRequests, 166 SyntacticMatches, 0 SemanticMatches, 142 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5035 ImplicationChecksByTransitivity, 12.0s TimeCoverageRelationStatistics Valid=3032, Invalid=17560, Unknown=0, NotChecked=0, Total=20592 [2022-11-26 01:01:29,492 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 786 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3259 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 786 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 3260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-26 01:01:29,492 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [786 Valid, 0 Invalid, 3260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3259 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-26 01:01:29,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-11-26 01:01:29,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 86. [2022-11-26 01:01:29,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 84 states have (on average 1.0357142857142858) internal successors, (87), 85 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:01:29,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 87 transitions. [2022-11-26 01:01:29,495 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 87 transitions. Word has length 81 [2022-11-26 01:01:29,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:01:29,495 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 87 transitions. [2022-11-26 01:01:29,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 103 states, 102 states have (on average 2.3823529411764706) internal successors, (243), 102 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:01:29,495 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 87 transitions. [2022-11-26 01:01:29,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-11-26 01:01:29,496 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:01:29,496 INFO L195 NwaCegarLoop]: trace histogram [16, 16, 16, 15, 15, 1, 1, 1, 1, 1] [2022-11-26 01:01:29,507 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-11-26 01:01:29,696 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable55 [2022-11-26 01:01:29,696 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:01:29,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:01:29,697 INFO L85 PathProgramCache]: Analyzing trace with hash 2096221730, now seen corresponding path program 30 times [2022-11-26 01:01:29,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:01:29,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1114005401] [2022-11-26 01:01:29,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:01:29,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:01:29,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:01:31,966 INFO L134 CoverageAnalysis]: Checked inductivity of 601 backedges. 16 proven. 585 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:31,967 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:01:31,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1114005401] [2022-11-26 01:01:31,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1114005401] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:01:31,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1687756289] [2022-11-26 01:01:31,967 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:01:31,967 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:01:31,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:01:31,971 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:01:31,978 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-11-26 01:01:36,750 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:01:36,750 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:01:36,763 INFO L263 TraceCheckSpWp]: Trace formula consists of 644 conjuncts, 190 conjunts are in the unsatisfiable core [2022-11-26 01:01:36,775 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:01:37,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:38,029 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,154 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,287 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,561 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,842 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:38,987 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:38,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:39,128 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:39,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:39,271 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:39,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:39,410 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:39,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:39,557 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:39,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:39,717 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:39,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:39,863 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:39,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:40,011 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:40,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-11-26 01:01:40,259 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:01:40,261 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:01:40,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-26 01:01:40,266 INFO L134 CoverageAnalysis]: Checked inductivity of 601 backedges. 16 proven. 585 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:40,266 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:01:47,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 1210 treesize of output 1162 [2022-11-26 01:01:49,996 INFO L134 CoverageAnalysis]: Checked inductivity of 601 backedges. 16 proven. 585 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:01:49,996 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1687756289] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:01:49,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [397162822] [2022-11-26 01:01:49,997 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:01:49,997 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:01:49,997 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:01:49,998 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:01:49,998 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:01:50,030 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:01:50,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:01:50,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:01:50,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:50,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:50,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:01:50,211 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:01:50,241 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:01:50,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:01:50,422 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-11-26 01:01:50,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 215 treesize of output 228 [2022-11-26 01:01:50,627 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:01:50,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:01:50,672 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:01:50,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:01:50,684 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:01:53,056 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22175#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:01:53,056 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:01:53,057 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:01:53,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [37, 38, 39] total 107 [2022-11-26 01:01:53,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76841331] [2022-11-26 01:01:53,057 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:01:53,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 107 states [2022-11-26 01:01:53,057 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:01:53,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 107 interpolants. [2022-11-26 01:01:53,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=12806, Unknown=0, NotChecked=0, Total=13110 [2022-11-26 01:01:53,058 INFO L87 Difference]: Start difference. First operand 86 states and 87 transitions. Second operand has 107 states, 107 states have (on average 2.2429906542056073) internal successors, (240), 107 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:02,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:02:02,073 INFO L93 Difference]: Finished difference Result 138 states and 139 transitions. [2022-11-26 01:02:02,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-26 01:02:02,074 INFO L78 Accepts]: Start accepts. Automaton has has 107 states, 107 states have (on average 2.2429906542056073) internal successors, (240), 107 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 83 [2022-11-26 01:02:02,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:02:02,074 INFO L225 Difference]: With dead ends: 138 [2022-11-26 01:02:02,075 INFO L226 Difference]: Without dead ends: 89 [2022-11-26 01:02:02,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 348 GetRequests, 173 SyntacticMatches, 13 SemanticMatches, 162 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3027 ImplicationChecksByTransitivity, 20.0s TimeCoverageRelationStatistics Valid=746, Invalid=25986, Unknown=0, NotChecked=0, Total=26732 [2022-11-26 01:02:02,076 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 248 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 6040 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 248 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 6058 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 6040 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-26 01:02:02,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [248 Valid, 137 Invalid, 6058 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 6040 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2022-11-26 01:02:02,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-11-26 01:02:02,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 88. [2022-11-26 01:02:02,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 86 states have (on average 1.0348837209302326) internal successors, (89), 87 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:02,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 89 transitions. [2022-11-26 01:02:02,078 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 89 transitions. Word has length 83 [2022-11-26 01:02:02,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:02:02,079 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 89 transitions. [2022-11-26 01:02:02,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 107 states, 107 states have (on average 2.2429906542056073) internal successors, (240), 107 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:02,079 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 89 transitions. [2022-11-26 01:02:02,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-11-26 01:02:02,080 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:02:02,080 INFO L195 NwaCegarLoop]: trace histogram [16, 16, 16, 16, 16, 1, 1, 1, 1, 1] [2022-11-26 01:02:02,091 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-11-26 01:02:02,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable56,48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:02,287 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:02:02,287 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:02:02,287 INFO L85 PathProgramCache]: Analyzing trace with hash 1859780409, now seen corresponding path program 31 times [2022-11-26 01:02:02,287 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:02:02,287 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1473763667] [2022-11-26 01:02:02,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:02:02,288 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:02:02,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:02:03,515 INFO L134 CoverageAnalysis]: Checked inductivity of 632 backedges. 196 proven. 436 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:03,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:02:03,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1473763667] [2022-11-26 01:02:03,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1473763667] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:02:03,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1385297982] [2022-11-26 01:02:03,515 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:02:03,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:03,516 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:02:03,516 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:02:03,518 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-11-26 01:02:03,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:02:03,877 INFO L263 TraceCheckSpWp]: Trace formula consists of 657 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-26 01:02:03,879 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:02:04,606 INFO L134 CoverageAnalysis]: Checked inductivity of 632 backedges. 225 proven. 407 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:04,606 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:02:05,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 01:02:05,992 INFO L134 CoverageAnalysis]: Checked inductivity of 632 backedges. 225 proven. 407 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:05,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1385297982] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:02:05,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [547093736] [2022-11-26 01:02:05,993 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:02:05,993 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:02:05,993 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:02:05,994 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:02:05,994 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:02:06,019 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:02:06,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:02:06,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:06,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:06,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:06,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:06,201 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:06,224 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:02:06,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:02:06,293 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:06,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:06,334 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:06,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:06,348 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:02:07,718 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23084#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:02:07,719 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:02:07,719 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:02:07,719 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 36, 36] total 72 [2022-11-26 01:02:07,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1093603663] [2022-11-26 01:02:07,719 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:02:07,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 73 states [2022-11-26 01:02:07,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:02:07,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 73 interpolants. [2022-11-26 01:02:07,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=718, Invalid=5762, Unknown=0, NotChecked=0, Total=6480 [2022-11-26 01:02:07,721 INFO L87 Difference]: Start difference. First operand 88 states and 89 transitions. Second operand has 73 states, 72 states have (on average 2.4027777777777777) internal successors, (173), 73 states have internal predecessors, (173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:09,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:02:09,365 INFO L93 Difference]: Finished difference Result 93 states and 94 transitions. [2022-11-26 01:02:09,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-26 01:02:09,366 INFO L78 Accepts]: Start accepts. Automaton has has 73 states, 72 states have (on average 2.4027777777777777) internal successors, (173), 73 states have internal predecessors, (173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 85 [2022-11-26 01:02:09,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:02:09,366 INFO L225 Difference]: With dead ends: 93 [2022-11-26 01:02:09,367 INFO L226 Difference]: Without dead ends: 93 [2022-11-26 01:02:09,367 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 307 GetRequests, 192 SyntacticMatches, 17 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3664 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=1592, Invalid=8308, Unknown=0, NotChecked=0, Total=9900 [2022-11-26 01:02:09,367 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 596 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 2125 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 596 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 2126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-26 01:02:09,367 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [596 Valid, 3 Invalid, 2126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2125 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-26 01:02:09,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-26 01:02:09,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 90. [2022-11-26 01:02:09,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 88 states have (on average 1.0340909090909092) internal successors, (91), 89 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:09,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 91 transitions. [2022-11-26 01:02:09,369 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 91 transitions. Word has length 85 [2022-11-26 01:02:09,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:02:09,370 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 91 transitions. [2022-11-26 01:02:09,370 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 73 states, 72 states have (on average 2.4027777777777777) internal successors, (173), 73 states have internal predecessors, (173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:09,370 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 91 transitions. [2022-11-26 01:02:09,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-11-26 01:02:09,371 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:02:09,371 INFO L195 NwaCegarLoop]: trace histogram [17, 16, 16, 16, 16, 1, 1, 1, 1, 1] [2022-11-26 01:02:09,379 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Ended with exit code 0 [2022-11-26 01:02:09,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable57,49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:09,571 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:02:09,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:02:09,572 INFO L85 PathProgramCache]: Analyzing trace with hash 1818617818, now seen corresponding path program 16 times [2022-11-26 01:02:09,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:02:09,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [84407934] [2022-11-26 01:02:09,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:02:09,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:02:09,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:02:11,597 INFO L134 CoverageAnalysis]: Checked inductivity of 648 backedges. 196 proven. 452 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:11,597 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:02:11,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [84407934] [2022-11-26 01:02:11,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [84407934] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:02:11,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2104192801] [2022-11-26 01:02:11,597 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:02:11,597 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:11,597 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:02:11,598 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:02:11,600 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-11-26 01:02:12,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:02:12,025 INFO L263 TraceCheckSpWp]: Trace formula consists of 663 conjuncts, 106 conjunts are in the unsatisfiable core [2022-11-26 01:02:12,029 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:02:12,088 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:02:12,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 01:02:12,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:02:14,693 INFO L134 CoverageAnalysis]: Checked inductivity of 648 backedges. 225 proven. 423 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:14,693 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:02:17,758 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:17,861 INFO L134 CoverageAnalysis]: Checked inductivity of 648 backedges. 256 proven. 392 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:17,861 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2104192801] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:02:17,861 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [387837902] [2022-11-26 01:02:17,862 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:02:17,862 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:02:17,862 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:02:17,862 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:02:17,862 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:02:17,887 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:02:17,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:02:17,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:17,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:17,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:18,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:18,050 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:18,073 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:02:18,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:02:18,157 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:18,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:18,207 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:18,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:18,214 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:02:20,234 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23933#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:02:20,234 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:02:20,234 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:02:20,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [36, 36, 36] total 108 [2022-11-26 01:02:20,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684683877] [2022-11-26 01:02:20,234 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:02:20,235 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 110 states [2022-11-26 01:02:20,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:02:20,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 110 interpolants. [2022-11-26 01:02:20,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=981, Invalid=12825, Unknown=0, NotChecked=0, Total=13806 [2022-11-26 01:02:20,236 INFO L87 Difference]: Start difference. First operand 90 states and 91 transitions. Second operand has 110 states, 109 states have (on average 2.36697247706422) internal successors, (258), 109 states have internal predecessors, (258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:25,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:02:25,052 INFO L93 Difference]: Finished difference Result 92 states and 93 transitions. [2022-11-26 01:02:25,052 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-11-26 01:02:25,052 INFO L78 Accepts]: Start accepts. Automaton has has 110 states, 109 states have (on average 2.36697247706422) internal successors, (258), 109 states have internal predecessors, (258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 86 [2022-11-26 01:02:25,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:02:25,053 INFO L225 Difference]: With dead ends: 92 [2022-11-26 01:02:25,053 INFO L226 Difference]: Without dead ends: 92 [2022-11-26 01:02:25,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 327 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 151 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5487 ImplicationChecksByTransitivity, 10.9s TimeCoverageRelationStatistics Valid=3115, Invalid=20141, Unknown=0, NotChecked=0, Total=23256 [2022-11-26 01:02:25,054 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 528 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3346 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 528 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 3365 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 3346 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-26 01:02:25,054 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [528 Valid, 0 Invalid, 3365 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 3346 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-26 01:02:25,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-26 01:02:25,055 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 91. [2022-11-26 01:02:25,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 89 states have (on average 1.0337078651685394) internal successors, (92), 90 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:25,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 92 transitions. [2022-11-26 01:02:25,056 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 92 transitions. Word has length 86 [2022-11-26 01:02:25,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:02:25,056 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 92 transitions. [2022-11-26 01:02:25,057 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 110 states, 109 states have (on average 2.36697247706422) internal successors, (258), 109 states have internal predecessors, (258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:25,057 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 92 transitions. [2022-11-26 01:02:25,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-11-26 01:02:25,057 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:02:25,057 INFO L195 NwaCegarLoop]: trace histogram [17, 17, 17, 16, 16, 1, 1, 1, 1, 1] [2022-11-26 01:02:25,064 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-11-26 01:02:25,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable58,50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:25,263 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:02:25,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:02:25,263 INFO L85 PathProgramCache]: Analyzing trace with hash -359966111, now seen corresponding path program 32 times [2022-11-26 01:02:25,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:02:25,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022802717] [2022-11-26 01:02:25,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:02:25,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:02:25,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:02:28,008 INFO L134 CoverageAnalysis]: Checked inductivity of 681 backedges. 17 proven. 664 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:28,008 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:02:28,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022802717] [2022-11-26 01:02:28,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022802717] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:02:28,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1492452156] [2022-11-26 01:02:28,009 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:02:28,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:28,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:02:28,011 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:02:28,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-11-26 01:02:37,303 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 18 check-sat command(s) [2022-11-26 01:02:37,303 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:02:37,320 INFO L263 TraceCheckSpWp]: Trace formula consists of 680 conjuncts, 219 conjunts are in the unsatisfiable core [2022-11-26 01:02:37,325 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:02:37,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:02:38,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 01:02:38,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:38,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:38,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:39,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:02:40,934 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:40,936 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:02:40,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 01:02:40,940 INFO L134 CoverageAnalysis]: Checked inductivity of 681 backedges. 17 proven. 664 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:40,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:02:41,013 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-26 01:02:41,020 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 01:02:41,151 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 01:02:41,541 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-26 01:02:41,551 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-26 01:02:42,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-26 01:02:42,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 01:02:43,964 INFO L134 CoverageAnalysis]: Checked inductivity of 681 backedges. 17 proven. 466 refuted. 0 times theorem prover too weak. 0 trivial. 198 not checked. [2022-11-26 01:02:43,965 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1492452156] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:02:43,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1192341058] [2022-11-26 01:02:43,966 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:02:43,966 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:02:43,966 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:02:43,966 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:02:43,966 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:02:44,001 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:02:44,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:02:44,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:02:44,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:44,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:44,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:44,186 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:44,215 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:02:44,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:02:44,310 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:44,413 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-11-26 01:02:44,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-11-26 01:02:44,518 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:44,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:44,574 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:44,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:44,583 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:02:46,552 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24824#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:02:46,552 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:02:46,552 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:02:46,552 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [39, 40, 40] total 108 [2022-11-26 01:02:46,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1340290013] [2022-11-26 01:02:46,553 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:02:46,553 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 108 states [2022-11-26 01:02:46,553 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:02:46,554 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 108 interpolants. [2022-11-26 01:02:46,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=345, Invalid=11774, Unknown=111, NotChecked=1110, Total=13340 [2022-11-26 01:02:46,555 INFO L87 Difference]: Start difference. First operand 91 states and 92 transitions. Second operand has 108 states, 108 states have (on average 2.259259259259259) internal successors, (244), 108 states have internal predecessors, (244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:51,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:02:51,909 INFO L93 Difference]: Finished difference Result 146 states and 147 transitions. [2022-11-26 01:02:51,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-26 01:02:51,910 INFO L78 Accepts]: Start accepts. Automaton has has 108 states, 108 states have (on average 2.259259259259259) internal successors, (244), 108 states have internal predecessors, (244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 88 [2022-11-26 01:02:51,910 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:02:51,910 INFO L225 Difference]: With dead ends: 146 [2022-11-26 01:02:51,910 INFO L226 Difference]: Without dead ends: 94 [2022-11-26 01:02:51,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 198 SyntacticMatches, 6 SemanticMatches, 148 ConstructedPredicates, 5 IntricatePredicates, 0 DeprecatedPredicates, 4641 ImplicationChecksByTransitivity, 10.8s TimeCoverageRelationStatistics Valid=671, Invalid=20118, Unknown=111, NotChecked=1450, Total=22350 [2022-11-26 01:02:51,912 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 156 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 5487 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 5961 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 5487 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 456 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-26 01:02:51,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 119 Invalid, 5961 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 5487 Invalid, 0 Unknown, 456 Unchecked, 2.7s Time] [2022-11-26 01:02:51,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-26 01:02:51,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 93. [2022-11-26 01:02:51,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 91 states have (on average 1.032967032967033) internal successors, (94), 92 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:51,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 94 transitions. [2022-11-26 01:02:51,914 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 94 transitions. Word has length 88 [2022-11-26 01:02:51,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:02:51,915 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 94 transitions. [2022-11-26 01:02:51,915 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 108 states, 108 states have (on average 2.259259259259259) internal successors, (244), 108 states have internal predecessors, (244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:02:51,915 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 94 transitions. [2022-11-26 01:02:51,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-11-26 01:02:51,915 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:02:51,916 INFO L195 NwaCegarLoop]: trace histogram [17, 17, 17, 17, 17, 1, 1, 1, 1, 1] [2022-11-26 01:02:51,928 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Ended with exit code 0 [2022-11-26 01:02:52,128 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-11-26 01:02:52,128 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:02:52,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:02:52,129 INFO L85 PathProgramCache]: Analyzing trace with hash -1369882710, now seen corresponding path program 33 times [2022-11-26 01:02:52,129 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:02:52,129 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2027936243] [2022-11-26 01:02:52,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:02:52,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:02:52,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:02:53,743 INFO L134 CoverageAnalysis]: Checked inductivity of 714 backedges. 225 proven. 489 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:53,743 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:02:53,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2027936243] [2022-11-26 01:02:53,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2027936243] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:02:53,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [705258013] [2022-11-26 01:02:53,744 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:02:53,744 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:02:53,744 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:02:53,745 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:02:53,751 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-11-26 01:02:55,320 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:02:55,320 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:02:55,328 INFO L263 TraceCheckSpWp]: Trace formula consists of 693 conjuncts, 101 conjunts are in the unsatisfiable core [2022-11-26 01:02:55,330 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:02:55,341 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 01:02:55,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 01:02:56,295 INFO L134 CoverageAnalysis]: Checked inductivity of 714 backedges. 256 proven. 458 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:56,295 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:02:58,768 INFO L134 CoverageAnalysis]: Checked inductivity of 714 backedges. 256 proven. 458 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:02:58,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [705258013] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:02:58,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1526138210] [2022-11-26 01:02:58,770 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:02:58,770 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:02:58,770 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:02:58,770 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:02:58,770 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:02:58,800 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:02:58,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:02:58,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:58,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:58,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:58,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:02:58,972 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:02:58,995 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:02:58,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:02:59,065 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:59,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:59,119 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:02:59,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:02:59,138 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:03:01,347 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25767#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:03:01,347 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:03:01,347 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:03:01,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [37, 37, 37] total 92 [2022-11-26 01:03:01,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745266779] [2022-11-26 01:03:01,347 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:03:01,347 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 93 states [2022-11-26 01:03:01,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:03:01,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 93 interpolants. [2022-11-26 01:03:01,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1269, Invalid=8831, Unknown=0, NotChecked=0, Total=10100 [2022-11-26 01:03:01,349 INFO L87 Difference]: Start difference. First operand 93 states and 94 transitions. Second operand has 93 states, 92 states have (on average 2.380434782608696) internal successors, (219), 93 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:03,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:03:03,416 INFO L93 Difference]: Finished difference Result 98 states and 99 transitions. [2022-11-26 01:03:03,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-26 01:03:03,417 INFO L78 Accepts]: Start accepts. Automaton has has 93 states, 92 states have (on average 2.380434782608696) internal successors, (219), 93 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 90 [2022-11-26 01:03:03,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:03:03,418 INFO L225 Difference]: With dead ends: 98 [2022-11-26 01:03:03,418 INFO L226 Difference]: Without dead ends: 98 [2022-11-26 01:03:03,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 325 GetRequests, 206 SyntacticMatches, 0 SemanticMatches, 119 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4267 ImplicationChecksByTransitivity, 6.6s TimeCoverageRelationStatistics Valid=2597, Invalid=11923, Unknown=0, NotChecked=0, Total=14520 [2022-11-26 01:03:03,419 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 504 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2194 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 504 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 2195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-26 01:03:03,419 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [504 Valid, 1 Invalid, 2195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2194 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-26 01:03:03,419 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-26 01:03:03,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 95. [2022-11-26 01:03:03,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 93 states have (on average 1.032258064516129) internal successors, (96), 94 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:03,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 96 transitions. [2022-11-26 01:03:03,421 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 96 transitions. Word has length 90 [2022-11-26 01:03:03,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:03:03,422 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 96 transitions. [2022-11-26 01:03:03,422 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 93 states, 92 states have (on average 2.380434782608696) internal successors, (219), 93 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:03,422 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 96 transitions. [2022-11-26 01:03:03,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-11-26 01:03:03,423 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:03:03,423 INFO L195 NwaCegarLoop]: trace histogram [18, 17, 17, 17, 17, 1, 1, 1, 1, 1] [2022-11-26 01:03:03,431 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-11-26 01:03:03,631 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:03,631 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:03:03,631 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:03:03,631 INFO L85 PathProgramCache]: Analyzing trace with hash 483308937, now seen corresponding path program 17 times [2022-11-26 01:03:03,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:03:03,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1717526494] [2022-11-26 01:03:03,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:03:03,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:03:03,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:03:05,769 INFO L134 CoverageAnalysis]: Checked inductivity of 731 backedges. 225 proven. 506 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:05,770 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:03:05,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1717526494] [2022-11-26 01:03:05,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1717526494] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:03:05,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [887958639] [2022-11-26 01:03:05,770 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:03:05,770 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:05,770 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:03:05,771 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:03:05,773 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-11-26 01:03:10,578 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 18 check-sat command(s) [2022-11-26 01:03:10,579 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:03:10,590 INFO L263 TraceCheckSpWp]: Trace formula consists of 699 conjuncts, 132 conjunts are in the unsatisfiable core [2022-11-26 01:03:10,594 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:03:10,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:03:10,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 01:03:13,888 INFO L134 CoverageAnalysis]: Checked inductivity of 731 backedges. 241 proven. 490 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:13,888 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:03:17,307 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:03:17,402 INFO L134 CoverageAnalysis]: Checked inductivity of 731 backedges. 289 proven. 442 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:17,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [887958639] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:03:17,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1264178506] [2022-11-26 01:03:17,403 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:03:17,404 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:03:17,404 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:03:17,404 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:03:17,404 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:03:17,434 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:03:17,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:03:17,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:03:17,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:17,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:17,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:17,604 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:03:17,626 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:03:17,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:03:17,711 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:03:17,806 INFO L321 Elim1Store]: treesize reduction 167, result has 22.3 percent of original size [2022-11-26 01:03:17,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-11-26 01:03:17,931 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:03:17,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:03:17,979 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:03:17,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:03:17,990 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:03:19,892 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '26665#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:03:19,892 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:03:19,892 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:03:19,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [38, 39, 38] total 115 [2022-11-26 01:03:19,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [825896149] [2022-11-26 01:03:19,892 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:03:19,893 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 117 states [2022-11-26 01:03:19,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:03:19,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 117 interpolants. [2022-11-26 01:03:19,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1321, Invalid=14179, Unknown=0, NotChecked=0, Total=15500 [2022-11-26 01:03:19,895 INFO L87 Difference]: Start difference. First operand 95 states and 96 transitions. Second operand has 117 states, 116 states have (on average 2.353448275862069) internal successors, (273), 116 states have internal predecessors, (273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:27,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:03:27,417 INFO L93 Difference]: Finished difference Result 97 states and 98 transitions. [2022-11-26 01:03:27,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2022-11-26 01:03:27,417 INFO L78 Accepts]: Start accepts. Automaton has has 117 states, 116 states have (on average 2.353448275862069) internal successors, (273), 116 states have internal predecessors, (273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 91 [2022-11-26 01:03:27,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:03:27,418 INFO L225 Difference]: With dead ends: 97 [2022-11-26 01:03:27,418 INFO L226 Difference]: Without dead ends: 97 [2022-11-26 01:03:27,420 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 363 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 177 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7245 ImplicationChecksByTransitivity, 14.5s TimeCoverageRelationStatistics Valid=4687, Invalid=27175, Unknown=0, NotChecked=0, Total=31862 [2022-11-26 01:03:27,420 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 855 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2825 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 855 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 2825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-26 01:03:27,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [855 Valid, 0 Invalid, 2861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 2825 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-26 01:03:27,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-26 01:03:27,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 96. [2022-11-26 01:03:27,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 94 states have (on average 1.0319148936170213) internal successors, (97), 95 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:27,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 97 transitions. [2022-11-26 01:03:27,422 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 97 transitions. Word has length 91 [2022-11-26 01:03:27,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:03:27,423 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 97 transitions. [2022-11-26 01:03:27,423 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 117 states, 116 states have (on average 2.353448275862069) internal successors, (273), 116 states have internal predecessors, (273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:27,423 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 97 transitions. [2022-11-26 01:03:27,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-26 01:03:27,423 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:03:27,423 INFO L195 NwaCegarLoop]: trace histogram [18, 18, 18, 17, 17, 1, 1, 1, 1, 1] [2022-11-26 01:03:27,436 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Forceful destruction successful, exit code 0 [2022-11-26 01:03:27,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:27,624 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:03:27,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:03:27,624 INFO L85 PathProgramCache]: Analyzing trace with hash 603420752, now seen corresponding path program 34 times [2022-11-26 01:03:27,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:03:27,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773055846] [2022-11-26 01:03:27,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:03:27,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:03:27,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:03:30,775 INFO L134 CoverageAnalysis]: Checked inductivity of 766 backedges. 18 proven. 748 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:30,775 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:03:30,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773055846] [2022-11-26 01:03:30,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773055846] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:03:30,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [368776208] [2022-11-26 01:03:30,776 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:03:30,776 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:30,776 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:03:30,777 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:03:30,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Waiting until timeout for monitored process [2022-11-26 01:03:31,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:03:31,215 INFO L263 TraceCheckSpWp]: Trace formula consists of 716 conjuncts, 181 conjunts are in the unsatisfiable core [2022-11-26 01:03:31,219 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:03:31,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:03:32,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:32,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 01:03:32,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:03:32,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 01:03:32,782 INFO L134 CoverageAnalysis]: Checked inductivity of 766 backedges. 18 proven. 748 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:32,782 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:03:32,791 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-26 01:03:32,914 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 01:03:33,165 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-26 01:03:33,174 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-11-26 01:03:33,303 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-26 01:03:33,311 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)))) is different from false [2022-11-26 01:03:33,320 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)))) is different from false [2022-11-26 01:03:33,329 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-11-26 01:03:33,956 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:03:33,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 01:03:33,962 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:03:33,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 01:03:34,344 INFO L134 CoverageAnalysis]: Checked inductivity of 766 backedges. 18 proven. 434 refuted. 0 times theorem prover too weak. 0 trivial. 314 not checked. [2022-11-26 01:03:34,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [368776208] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:03:34,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1281021569] [2022-11-26 01:03:34,346 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:03:34,346 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:03:34,346 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:03:34,346 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:03:34,346 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:03:34,374 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:03:34,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:03:34,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:34,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:34,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:34,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:34,536 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:03:34,569 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:03:34,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:03:34,676 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:03:34,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:03:34,727 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:03:34,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:03:34,737 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:03:36,469 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27608#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:03:36,470 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:03:36,470 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:03:36,470 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [41, 42, 42] total 82 [2022-11-26 01:03:36,470 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1359761379] [2022-11-26 01:03:36,470 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:03:36,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 82 states [2022-11-26 01:03:36,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:03:36,471 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 82 interpolants. [2022-11-26 01:03:36,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=233, Invalid=6268, Unknown=173, NotChecked=1336, Total=8010 [2022-11-26 01:03:36,472 INFO L87 Difference]: Start difference. First operand 96 states and 97 transitions. Second operand has 82 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:41,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:03:41,369 INFO L93 Difference]: Finished difference Result 154 states and 155 transitions. [2022-11-26 01:03:41,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2022-11-26 01:03:41,369 INFO L78 Accepts]: Start accepts. Automaton has has 82 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 93 [2022-11-26 01:03:41,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:03:41,370 INFO L225 Difference]: With dead ends: 154 [2022-11-26 01:03:41,370 INFO L226 Difference]: Without dead ends: 99 [2022-11-26 01:03:41,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 369 GetRequests, 244 SyntacticMatches, 6 SemanticMatches, 119 ConstructedPredicates, 8 IntricatePredicates, 0 DeprecatedPredicates, 1720 ImplicationChecksByTransitivity, 7.7s TimeCoverageRelationStatistics Valid=462, Invalid=12052, Unknown=174, NotChecked=1832, Total=14520 [2022-11-26 01:03:41,371 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 142 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 4077 mSolverCounterSat, 18 mSolverCounterUnsat, 141 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 4955 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 4077 IncrementalHoareTripleChecker+Invalid, 141 IncrementalHoareTripleChecker+Unknown, 719 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-26 01:03:41,371 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 90 Invalid, 4955 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 4077 Invalid, 141 Unknown, 719 Unchecked, 2.4s Time] [2022-11-26 01:03:41,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-11-26 01:03:41,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 98. [2022-11-26 01:03:41,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 96 states have (on average 1.03125) internal successors, (99), 97 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:41,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 99 transitions. [2022-11-26 01:03:41,373 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 99 transitions. Word has length 93 [2022-11-26 01:03:41,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:03:41,374 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 99 transitions. [2022-11-26 01:03:41,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 82 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:41,374 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 99 transitions. [2022-11-26 01:03:41,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-11-26 01:03:41,375 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:03:41,375 INFO L195 NwaCegarLoop]: trace histogram [18, 18, 18, 18, 18, 1, 1, 1, 1, 1] [2022-11-26 01:03:41,383 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Ended with exit code 0 [2022-11-26 01:03:41,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable62,54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:41,583 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:03:41,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:03:41,583 INFO L85 PathProgramCache]: Analyzing trace with hash -90015577, now seen corresponding path program 35 times [2022-11-26 01:03:41,583 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:03:41,583 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1685303229] [2022-11-26 01:03:41,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:03:41,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:03:41,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:03:43,031 INFO L134 CoverageAnalysis]: Checked inductivity of 801 backedges. 256 proven. 545 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:43,031 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:03:43,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1685303229] [2022-11-26 01:03:43,032 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1685303229] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:03:43,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1504801113] [2022-11-26 01:03:43,032 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:03:43,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:43,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:03:43,033 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:03:43,036 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Waiting until timeout for monitored process [2022-11-26 01:03:45,381 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 19 check-sat command(s) [2022-11-26 01:03:45,382 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:03:45,390 INFO L263 TraceCheckSpWp]: Trace formula consists of 729 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-26 01:03:45,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:03:45,403 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 01:03:45,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 01:03:46,925 INFO L134 CoverageAnalysis]: Checked inductivity of 801 backedges. 289 proven. 512 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:46,925 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:03:49,440 INFO L134 CoverageAnalysis]: Checked inductivity of 801 backedges. 289 proven. 512 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:49,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1504801113] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:03:49,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1921957944] [2022-11-26 01:03:49,441 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:03:49,442 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:03:49,442 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:03:49,442 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:03:49,442 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:03:49,487 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:03:49,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:03:49,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:49,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:49,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:49,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:03:49,673 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:03:49,697 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:03:49,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:03:49,755 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:03:49,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:03:49,800 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:03:49,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:03:49,812 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:03:51,456 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28615#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:03:51,456 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:03:51,456 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:03:51,456 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [39, 40, 40] total 117 [2022-11-26 01:03:51,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2002712771] [2022-11-26 01:03:51,457 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:03:51,457 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 118 states [2022-11-26 01:03:51,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:03:51,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 118 interpolants. [2022-11-26 01:03:51,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2132, Invalid=13618, Unknown=0, NotChecked=0, Total=15750 [2022-11-26 01:03:51,460 INFO L87 Difference]: Start difference. First operand 98 states and 99 transitions. Second operand has 118 states, 117 states have (on average 2.4188034188034186) internal successors, (283), 118 states have internal predecessors, (283), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:52,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:03:52,819 INFO L93 Difference]: Finished difference Result 103 states and 104 transitions. [2022-11-26 01:03:52,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-26 01:03:52,820 INFO L78 Accepts]: Start accepts. Automaton has has 118 states, 117 states have (on average 2.4188034188034186) internal successors, (283), 118 states have internal predecessors, (283), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 95 [2022-11-26 01:03:52,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:03:52,821 INFO L225 Difference]: With dead ends: 103 [2022-11-26 01:03:52,821 INFO L226 Difference]: Without dead ends: 103 [2022-11-26 01:03:52,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7327 ImplicationChecksByTransitivity, 6.5s TimeCoverageRelationStatistics Valid=3824, Invalid=17638, Unknown=0, NotChecked=0, Total=21462 [2022-11-26 01:03:52,823 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 721 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1269 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 721 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1270 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-26 01:03:52,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [721 Valid, 3 Invalid, 1270 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1269 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-26 01:03:52,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-11-26 01:03:52,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 100. [2022-11-26 01:03:52,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 98 states have (on average 1.030612244897959) internal successors, (101), 99 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:52,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 101 transitions. [2022-11-26 01:03:52,828 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 101 transitions. Word has length 95 [2022-11-26 01:03:52,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:03:52,829 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 101 transitions. [2022-11-26 01:03:52,829 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 118 states, 117 states have (on average 2.4188034188034186) internal successors, (283), 118 states have internal predecessors, (283), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:03:52,829 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 101 transitions. [2022-11-26 01:03:52,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-26 01:03:52,830 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:03:52,830 INFO L195 NwaCegarLoop]: trace histogram [19, 18, 18, 18, 18, 1, 1, 1, 1, 1] [2022-11-26 01:03:52,847 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Forceful destruction successful, exit code 0 [2022-11-26 01:03:53,047 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable63,55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:53,047 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:03:53,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:03:53,048 INFO L85 PathProgramCache]: Analyzing trace with hash 1504484396, now seen corresponding path program 18 times [2022-11-26 01:03:53,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:03:53,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2108967967] [2022-11-26 01:03:53,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:03:53,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:03:53,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:03:55,378 INFO L134 CoverageAnalysis]: Checked inductivity of 819 backedges. 256 proven. 563 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:03:55,378 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:03:55,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2108967967] [2022-11-26 01:03:55,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2108967967] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:03:55,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1287560986] [2022-11-26 01:03:55,379 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:03:55,379 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:03:55,379 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:03:55,380 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:03:55,382 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Waiting until timeout for monitored process [2022-11-26 01:03:59,106 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:03:59,106 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:03:59,117 INFO L263 TraceCheckSpWp]: Trace formula consists of 735 conjuncts, 181 conjunts are in the unsatisfiable core [2022-11-26 01:03:59,135 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:03:59,211 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-26 01:03:59,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-26 01:03:59,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:04:04,222 INFO L134 CoverageAnalysis]: Checked inductivity of 819 backedges. 289 proven. 530 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:04:04,222 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:04:08,630 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:04:08,760 INFO L134 CoverageAnalysis]: Checked inductivity of 819 backedges. 324 proven. 495 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:04:08,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1287560986] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:04:08,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [558675621] [2022-11-26 01:04:08,761 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:04:08,761 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:04:08,761 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:04:08,762 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:04:08,762 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:04:08,783 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:08,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:04:08,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:08,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:08,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:08,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:08,971 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:04:09,000 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:04:09,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:04:09,059 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:04:09,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:04:09,108 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:04:09,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:04:09,114 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:04:11,337 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29559#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:04:11,337 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:04:11,337 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:04:11,337 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [40, 39, 40] total 119 [2022-11-26 01:04:11,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [929254624] [2022-11-26 01:04:11,337 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:04:11,338 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 121 states [2022-11-26 01:04:11,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:04:11,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 121 interpolants. [2022-11-26 01:04:11,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1729, Invalid=14783, Unknown=0, NotChecked=0, Total=16512 [2022-11-26 01:04:11,339 INFO L87 Difference]: Start difference. First operand 100 states and 101 transitions. Second operand has 121 states, 120 states have (on average 2.4) internal successors, (288), 120 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:04:17,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:04:17,160 INFO L93 Difference]: Finished difference Result 102 states and 103 transitions. [2022-11-26 01:04:17,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-11-26 01:04:17,160 INFO L78 Accepts]: Start accepts. Automaton has has 121 states, 120 states have (on average 2.4) internal successors, (288), 120 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 96 [2022-11-26 01:04:17,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:04:17,161 INFO L225 Difference]: With dead ends: 102 [2022-11-26 01:04:17,161 INFO L226 Difference]: Without dead ends: 102 [2022-11-26 01:04:17,163 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 365 GetRequests, 199 SyntacticMatches, 0 SemanticMatches, 166 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7060 ImplicationChecksByTransitivity, 15.1s TimeCoverageRelationStatistics Valid=4376, Invalid=23680, Unknown=0, NotChecked=0, Total=28056 [2022-11-26 01:04:17,164 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 658 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2727 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 658 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2728 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2727 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-26 01:04:17,164 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [658 Valid, 0 Invalid, 2728 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2727 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-26 01:04:17,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-11-26 01:04:17,166 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 101. [2022-11-26 01:04:17,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 99 states have (on average 1.0303030303030303) internal successors, (102), 100 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:04:17,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 102 transitions. [2022-11-26 01:04:17,166 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 102 transitions. Word has length 96 [2022-11-26 01:04:17,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:04:17,167 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 102 transitions. [2022-11-26 01:04:17,167 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 121 states, 120 states have (on average 2.4) internal successors, (288), 120 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:04:17,167 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 102 transitions. [2022-11-26 01:04:17,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-26 01:04:17,168 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:04:17,168 INFO L195 NwaCegarLoop]: trace histogram [19, 19, 19, 18, 18, 1, 1, 1, 1, 1] [2022-11-26 01:04:17,179 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Ended with exit code 0 [2022-11-26 01:04:17,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 56 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable64 [2022-11-26 01:04:17,378 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:04:17,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:04:17,378 INFO L85 PathProgramCache]: Analyzing trace with hash -1594473933, now seen corresponding path program 36 times [2022-11-26 01:04:17,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:04:17,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498054162] [2022-11-26 01:04:17,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:04:17,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:04:17,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:04:20,387 INFO L134 CoverageAnalysis]: Checked inductivity of 856 backedges. 19 proven. 837 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:04:20,387 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:04:20,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498054162] [2022-11-26 01:04:20,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498054162] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:04:20,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1745007691] [2022-11-26 01:04:20,387 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:04:20,387 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:04:20,388 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:04:20,388 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:04:20,390 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Waiting until timeout for monitored process [2022-11-26 01:04:26,506 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:04:26,506 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:04:26,520 INFO L263 TraceCheckSpWp]: Trace formula consists of 752 conjuncts, 235 conjunts are in the unsatisfiable core [2022-11-26 01:04:26,527 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:04:27,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 01:04:28,185 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,195 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 01:04:28,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 28 treesize of output 34 [2022-11-26 01:04:28,490 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,490 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,491 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,493 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:04:28,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 35 treesize of output 37 [2022-11-26 01:04:28,672 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,673 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,674 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,676 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:04:28,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 35 treesize of output 37 [2022-11-26 01:04:28,856 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,857 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,858 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:28,860 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:04:28,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 35 treesize of output 37 [2022-11-26 01:04:29,058 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,059 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,061 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:04:29,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 01:04:29,233 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,234 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,236 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:04:29,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 01:04:29,416 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,417 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,431 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:29,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:29,616 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,617 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,631 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:29,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:29,815 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,816 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:29,830 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:29,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:30,018 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,019 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,034 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:30,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:30,226 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,227 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,241 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:30,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:30,433 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,434 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,449 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:30,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:30,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,658 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:30,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:30,854 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,855 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:30,873 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:30,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:31,074 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,075 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,089 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:31,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:31,308 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,309 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,323 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:31,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:31,516 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,517 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,532 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:31,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:31,736 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,737 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:31,751 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-11-26 01:04:31,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-11-26 01:04:32,020 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:04:32,022 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:04:32,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-26 01:04:32,026 INFO L134 CoverageAnalysis]: Checked inductivity of 856 backedges. 19 proven. 837 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:04:32,027 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:04:42,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 180 treesize of output 176 [2022-11-26 01:04:42,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 101 treesize of output 95 [2022-11-26 01:04:46,121 INFO L134 CoverageAnalysis]: Checked inductivity of 856 backedges. 22 proven. 834 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:04:46,121 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1745007691] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:04:46,121 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [55759965] [2022-11-26 01:04:46,122 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:04:46,122 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:04:46,123 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:04:46,123 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:04:46,123 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:04:46,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:04:46,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:04:46,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:46,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:46,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:46,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:04:46,330 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:04:46,354 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:04:46,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:04:46,422 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:04:46,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:04:46,472 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:04:46,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:04:46,480 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:04:49,329 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30558#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:04:49,329 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:04:49,329 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:04:49,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 46, 46] total 128 [2022-11-26 01:04:49,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [254560443] [2022-11-26 01:04:49,330 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:04:49,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 128 states [2022-11-26 01:04:49,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:04:49,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 128 interpolants. [2022-11-26 01:04:49,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=369, Invalid=17991, Unknown=0, NotChecked=0, Total=18360 [2022-11-26 01:04:49,331 INFO L87 Difference]: Start difference. First operand 101 states and 102 transitions. Second operand has 128 states, 128 states have (on average 2.2265625) internal successors, (285), 128 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:02,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:05:02,205 INFO L93 Difference]: Finished difference Result 162 states and 163 transitions. [2022-11-26 01:05:02,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-26 01:05:02,206 INFO L78 Accepts]: Start accepts. Automaton has has 128 states, 128 states have (on average 2.2265625) internal successors, (285), 128 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 98 [2022-11-26 01:05:02,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:05:02,207 INFO L225 Difference]: With dead ends: 162 [2022-11-26 01:05:02,207 INFO L226 Difference]: Without dead ends: 104 [2022-11-26 01:05:02,208 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 412 GetRequests, 203 SyntacticMatches, 16 SemanticMatches, 193 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4472 ImplicationChecksByTransitivity, 29.2s TimeCoverageRelationStatistics Valid=913, Invalid=36917, Unknown=0, NotChecked=0, Total=37830 [2022-11-26 01:05:02,208 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 236 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 7978 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 8000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 7978 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-11-26 01:05:02,208 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [236 Valid, 153 Invalid, 8000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 7978 Invalid, 0 Unknown, 0 Unchecked, 4.7s Time] [2022-11-26 01:05:02,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-26 01:05:02,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 103. [2022-11-26 01:05:02,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 101 states have (on average 1.0297029702970297) internal successors, (104), 102 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:02,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 104 transitions. [2022-11-26 01:05:02,211 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 104 transitions. Word has length 98 [2022-11-26 01:05:02,211 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:05:02,211 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 104 transitions. [2022-11-26 01:05:02,211 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 128 states, 128 states have (on average 2.2265625) internal successors, (285), 128 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:02,212 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 104 transitions. [2022-11-26 01:05:02,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-11-26 01:05:02,212 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:05:02,212 INFO L195 NwaCegarLoop]: trace histogram [19, 19, 19, 19, 19, 1, 1, 1, 1, 1] [2022-11-26 01:05:02,226 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Ended with exit code 0 [2022-11-26 01:05:02,426 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 57 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable65 [2022-11-26 01:05:02,426 INFO L420 AbstractCegarLoop]: === Iteration 67 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:05:02,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:05:02,426 INFO L85 PathProgramCache]: Analyzing trace with hash -777985988, now seen corresponding path program 37 times [2022-11-26 01:05:02,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:05:02,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1112755077] [2022-11-26 01:05:02,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:05:02,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:05:02,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:05:04,400 INFO L134 CoverageAnalysis]: Checked inductivity of 893 backedges. 289 proven. 604 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:04,400 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:05:04,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1112755077] [2022-11-26 01:05:04,400 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1112755077] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:05:04,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [217594205] [2022-11-26 01:05:04,400 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:05:04,400 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:05:04,400 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:05:04,401 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:05:04,403 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Waiting until timeout for monitored process [2022-11-26 01:05:04,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:05:04,862 INFO L263 TraceCheckSpWp]: Trace formula consists of 765 conjuncts, 107 conjunts are in the unsatisfiable core [2022-11-26 01:05:04,864 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:05:05,875 INFO L134 CoverageAnalysis]: Checked inductivity of 893 backedges. 324 proven. 569 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:05,875 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:05:07,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 01:05:07,929 INFO L134 CoverageAnalysis]: Checked inductivity of 893 backedges. 324 proven. 569 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:07,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [217594205] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:05:07,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1370126464] [2022-11-26 01:05:07,930 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:05:07,930 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:05:07,930 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:05:07,930 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:05:07,930 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:05:07,961 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:05:07,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:05:07,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:05:08,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:08,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:08,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:08,132 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:05:08,154 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:05:08,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:05:08,236 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:05:08,324 INFO L321 Elim1Store]: treesize reduction 167, result has 20.9 percent of original size [2022-11-26 01:05:08,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-11-26 01:05:08,497 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:05:08,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:05:08,552 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:05:08,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:05:08,561 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:05:10,069 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31628#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:05:10,070 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:05:10,070 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:05:10,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [41, 42, 42] total 84 [2022-11-26 01:05:10,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202864969] [2022-11-26 01:05:10,070 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:05:10,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-11-26 01:05:10,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:05:10,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-11-26 01:05:10,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=955, Invalid=7601, Unknown=0, NotChecked=0, Total=8556 [2022-11-26 01:05:10,072 INFO L87 Difference]: Start difference. First operand 103 states and 104 transitions. Second operand has 85 states, 84 states have (on average 2.4166666666666665) internal successors, (203), 85 states have internal predecessors, (203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:12,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:05:12,496 INFO L93 Difference]: Finished difference Result 108 states and 109 transitions. [2022-11-26 01:05:12,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-11-26 01:05:12,497 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 84 states have (on average 2.4166666666666665) internal successors, (203), 85 states have internal predecessors, (203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 100 [2022-11-26 01:05:12,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:05:12,497 INFO L225 Difference]: With dead ends: 108 [2022-11-26 01:05:12,498 INFO L226 Difference]: Without dead ends: 108 [2022-11-26 01:05:12,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 361 GetRequests, 228 SyntacticMatches, 20 SemanticMatches, 113 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4942 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=2132, Invalid=10978, Unknown=0, NotChecked=0, Total=13110 [2022-11-26 01:05:12,499 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 417 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2623 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 417 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 2624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2623 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-26 01:05:12,499 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [417 Valid, 1 Invalid, 2624 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2623 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-26 01:05:12,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-26 01:05:12,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 105. [2022-11-26 01:05:12,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 103 states have (on average 1.029126213592233) internal successors, (106), 104 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:12,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 106 transitions. [2022-11-26 01:05:12,501 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 106 transitions. Word has length 100 [2022-11-26 01:05:12,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:05:12,502 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 106 transitions. [2022-11-26 01:05:12,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 84 states have (on average 2.4166666666666665) internal successors, (203), 85 states have internal predecessors, (203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:12,502 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 106 transitions. [2022-11-26 01:05:12,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-11-26 01:05:12,502 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:05:12,503 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 19, 19, 1, 1, 1, 1, 1] [2022-11-26 01:05:12,515 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Forceful destruction successful, exit code 0 [2022-11-26 01:05:12,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 58 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable66 [2022-11-26 01:05:12,703 INFO L420 AbstractCegarLoop]: === Iteration 68 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:05:12,703 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:05:12,703 INFO L85 PathProgramCache]: Analyzing trace with hash 1652238135, now seen corresponding path program 19 times [2022-11-26 01:05:12,703 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:05:12,704 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484115455] [2022-11-26 01:05:12,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:05:12,704 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:05:12,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:05:15,264 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 289 proven. 623 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:15,265 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:05:15,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484115455] [2022-11-26 01:05:15,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [484115455] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:05:15,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [367533619] [2022-11-26 01:05:15,265 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:05:15,265 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:05:15,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:05:15,266 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:05:15,268 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Waiting until timeout for monitored process [2022-11-26 01:05:15,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:05:15,817 INFO L263 TraceCheckSpWp]: Trace formula consists of 771 conjuncts, 138 conjunts are in the unsatisfiable core [2022-11-26 01:05:15,821 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:05:15,888 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:05:15,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-26 01:05:15,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:05:21,658 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 0 proven. 912 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:21,659 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:05:27,333 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:05:27,491 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 361 proven. 551 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:27,491 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [367533619] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:05:27,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1275801448] [2022-11-26 01:05:27,492 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:05:27,492 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:05:27,492 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:05:27,492 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:05:27,492 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:05:27,521 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:05:27,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:05:27,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:05:27,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:27,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:27,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:27,684 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:05:27,713 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:05:27,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:05:27,797 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:05:27,893 INFO L321 Elim1Store]: treesize reduction 167, result has 22.3 percent of original size [2022-11-26 01:05:27,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-11-26 01:05:28,008 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:05:28,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:05:28,082 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:05:28,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:05:28,092 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:05:30,562 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32622#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:05:30,562 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:05:30,562 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:05:30,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [42, 42, 43] total 127 [2022-11-26 01:05:30,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441222078] [2022-11-26 01:05:30,562 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:05:30,563 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 129 states [2022-11-26 01:05:30,563 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:05:30,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 129 interpolants. [2022-11-26 01:05:30,565 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1563, Invalid=17069, Unknown=0, NotChecked=0, Total=18632 [2022-11-26 01:05:30,565 INFO L87 Difference]: Start difference. First operand 105 states and 106 transitions. Second operand has 129 states, 128 states have (on average 2.3671875) internal successors, (303), 128 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:39,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:05:39,994 INFO L93 Difference]: Finished difference Result 108 states and 109 transitions. [2022-11-26 01:05:39,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2022-11-26 01:05:39,994 INFO L78 Accepts]: Start accepts. Automaton has has 129 states, 128 states have (on average 2.3671875) internal successors, (303), 128 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 101 [2022-11-26 01:05:39,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:05:39,994 INFO L225 Difference]: With dead ends: 108 [2022-11-26 01:05:39,994 INFO L226 Difference]: Without dead ends: 108 [2022-11-26 01:05:39,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 386 GetRequests, 208 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6977 ImplicationChecksByTransitivity, 19.7s TimeCoverageRelationStatistics Valid=3439, Invalid=28781, Unknown=0, NotChecked=0, Total=32220 [2022-11-26 01:05:39,996 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 514 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4980 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 514 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 4984 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 4980 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-26 01:05:39,996 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [514 Valid, 0 Invalid, 4984 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 4980 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-26 01:05:39,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-26 01:05:39,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 106. [2022-11-26 01:05:39,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 104 states have (on average 1.0288461538461537) internal successors, (107), 105 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:39,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 107 transitions. [2022-11-26 01:05:39,998 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 107 transitions. Word has length 101 [2022-11-26 01:05:39,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:05:39,999 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 107 transitions. [2022-11-26 01:05:39,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 129 states, 128 states have (on average 2.3671875) internal successors, (303), 128 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:05:39,999 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 107 transitions. [2022-11-26 01:05:39,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-26 01:05:40,000 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:05:40,000 INFO L195 NwaCegarLoop]: trace histogram [20, 20, 20, 19, 19, 1, 1, 1, 1, 1] [2022-11-26 01:05:40,011 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Forceful destruction successful, exit code 0 [2022-11-26 01:05:40,208 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable67,59 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:05:40,208 INFO L420 AbstractCegarLoop]: === Iteration 69 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:05:40,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:05:40,209 INFO L85 PathProgramCache]: Analyzing trace with hash -1337051522, now seen corresponding path program 38 times [2022-11-26 01:05:40,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:05:40,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1736571425] [2022-11-26 01:05:40,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:05:40,210 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:05:40,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:05:43,491 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 20 proven. 931 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:05:43,491 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:05:43,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1736571425] [2022-11-26 01:05:43,491 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1736571425] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:05:43,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [580572729] [2022-11-26 01:05:43,491 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:05:43,492 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:05:43,492 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:05:43,495 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:05:43,497 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Waiting until timeout for monitored process [2022-11-26 01:05:58,379 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 21 check-sat command(s) [2022-11-26 01:05:58,379 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:05:58,398 INFO L263 TraceCheckSpWp]: Trace formula consists of 788 conjuncts, 199 conjunts are in the unsatisfiable core [2022-11-26 01:05:58,403 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:05:58,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:05:59,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:05:59,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 01:05:59,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:05:59,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:06:00,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 01:06:00,205 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 20 proven. 931 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:06:00,205 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:06:00,340 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 01:06:00,349 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 01:06:00,358 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 01:06:00,367 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-11-26 01:06:00,504 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-11-26 01:06:00,643 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-26 01:06:00,652 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2022-11-26 01:06:00,793 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-11-26 01:06:00,802 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-11-26 01:06:00,944 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 15)) 0)) is different from false [2022-11-26 01:06:01,382 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 19 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-11-26 01:06:01,396 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:06:01,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 01:06:01,401 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:06:01,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 01:06:01,818 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 20 proven. 469 refuted. 0 times theorem prover too weak. 0 trivial. 462 not checked. [2022-11-26 01:06:01,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [580572729] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:06:01,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [767923947] [2022-11-26 01:06:01,820 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:06:01,820 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:06:01,820 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:06:01,820 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:06:01,820 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:06:01,851 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:06:01,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:06:01,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:01,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:01,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:01,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:02,014 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:06:02,036 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:06:02,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:06:02,103 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:06:02,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:06:02,156 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:06:02,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:06:02,163 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:06:04,018 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33632#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:06:04,018 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:06:04,018 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:06:04,018 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [45, 46, 46] total 90 [2022-11-26 01:06:04,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150130587] [2022-11-26 01:06:04,018 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:06:04,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 90 states [2022-11-26 01:06:04,019 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:06:04,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 90 interpolants. [2022-11-26 01:06:04,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=249, Invalid=7092, Unknown=185, NotChecked=1980, Total=9506 [2022-11-26 01:06:04,021 INFO L87 Difference]: Start difference. First operand 106 states and 107 transitions. Second operand has 90 states, 90 states have (on average 2.3222222222222224) internal successors, (209), 90 states have internal predecessors, (209), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:06:09,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:06:09,397 INFO L93 Difference]: Finished difference Result 170 states and 171 transitions. [2022-11-26 01:06:09,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-26 01:06:09,398 INFO L78 Accepts]: Start accepts. Automaton has has 90 states, 90 states have (on average 2.3222222222222224) internal successors, (209), 90 states have internal predecessors, (209), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 103 [2022-11-26 01:06:09,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:06:09,399 INFO L225 Difference]: With dead ends: 170 [2022-11-26 01:06:09,399 INFO L226 Difference]: Without dead ends: 109 [2022-11-26 01:06:09,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 407 GetRequests, 272 SyntacticMatches, 11 SemanticMatches, 124 ConstructedPredicates, 11 IntricatePredicates, 0 DeprecatedPredicates, 1776 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=436, Invalid=12532, Unknown=186, NotChecked=2596, Total=15750 [2022-11-26 01:06:09,399 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 111 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 5773 mSolverCounterSat, 20 mSolverCounterUnsat, 21 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 6826 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 5773 IncrementalHoareTripleChecker+Invalid, 21 IncrementalHoareTripleChecker+Unknown, 1012 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-26 01:06:09,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 114 Invalid, 6826 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 5773 Invalid, 21 Unknown, 1012 Unchecked, 2.9s Time] [2022-11-26 01:06:09,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2022-11-26 01:06:09,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 108. [2022-11-26 01:06:09,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 106 states have (on average 1.028301886792453) internal successors, (109), 107 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:06:09,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 109 transitions. [2022-11-26 01:06:09,401 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 109 transitions. Word has length 103 [2022-11-26 01:06:09,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:06:09,401 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 109 transitions. [2022-11-26 01:06:09,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 90 states, 90 states have (on average 2.3222222222222224) internal successors, (209), 90 states have internal predecessors, (209), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:06:09,402 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 109 transitions. [2022-11-26 01:06:09,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-11-26 01:06:09,402 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:06:09,403 INFO L195 NwaCegarLoop]: trace histogram [20, 20, 20, 20, 20, 1, 1, 1, 1, 1] [2022-11-26 01:06:09,419 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Forceful destruction successful, exit code 0 [2022-11-26 01:06:09,619 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 60 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable68 [2022-11-26 01:06:09,619 INFO L420 AbstractCegarLoop]: === Iteration 70 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:06:09,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:06:09,620 INFO L85 PathProgramCache]: Analyzing trace with hash 116520469, now seen corresponding path program 39 times [2022-11-26 01:06:09,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:06:09,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1206867399] [2022-11-26 01:06:09,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:06:09,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:06:09,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:06:11,452 INFO L134 CoverageAnalysis]: Checked inductivity of 990 backedges. 324 proven. 666 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:06:11,452 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:06:11,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1206867399] [2022-11-26 01:06:11,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1206867399] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:06:11,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [522429769] [2022-11-26 01:06:11,452 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:06:11,453 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:06:11,453 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:06:11,453 INFO L229 MonitoredProcess]: Starting monitored process 61 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:06:11,455 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (61)] Waiting until timeout for monitored process [2022-11-26 01:06:23,933 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:06:23,933 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:06:23,947 INFO L263 TraceCheckSpWp]: Trace formula consists of 801 conjuncts, 116 conjunts are in the unsatisfiable core [2022-11-26 01:06:23,949 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:06:23,962 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 01:06:23,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-26 01:06:25,095 INFO L134 CoverageAnalysis]: Checked inductivity of 990 backedges. 361 proven. 629 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:06:25,095 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:06:28,144 INFO L134 CoverageAnalysis]: Checked inductivity of 990 backedges. 361 proven. 629 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:06:28,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [522429769] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:06:28,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2023500413] [2022-11-26 01:06:28,145 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:06:28,145 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:06:28,145 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:06:28,145 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:06:28,146 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:06:28,167 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:06:28,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:06:28,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:28,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:28,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:28,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:06:28,343 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:06:28,366 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:06:28,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:06:28,438 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:06:28,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:06:28,520 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:06:28,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:06:28,532 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:06:30,862 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '34714#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:06:30,862 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:06:30,862 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:06:30,862 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 43, 43] total 107 [2022-11-26 01:06:30,863 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1519808911] [2022-11-26 01:06:30,863 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:06:30,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 108 states [2022-11-26 01:06:30,863 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:06:30,864 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 108 interpolants. [2022-11-26 01:06:30,864 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1692, Invalid=11648, Unknown=0, NotChecked=0, Total=13340 [2022-11-26 01:06:30,864 INFO L87 Difference]: Start difference. First operand 108 states and 109 transitions. Second operand has 108 states, 107 states have (on average 2.383177570093458) internal successors, (255), 108 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:06:33,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:06:33,258 INFO L93 Difference]: Finished difference Result 113 states and 114 transitions. [2022-11-26 01:06:33,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-26 01:06:33,259 INFO L78 Accepts]: Start accepts. Automaton has has 108 states, 107 states have (on average 2.383177570093458) internal successors, (255), 108 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 105 [2022-11-26 01:06:33,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:06:33,260 INFO L225 Difference]: With dead ends: 113 [2022-11-26 01:06:33,260 INFO L226 Difference]: Without dead ends: 113 [2022-11-26 01:06:33,261 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 379 GetRequests, 242 SyntacticMatches, 0 SemanticMatches, 137 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5707 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=3461, Invalid=15721, Unknown=0, NotChecked=0, Total=19182 [2022-11-26 01:06:33,261 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 789 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 3140 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 789 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 3141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-26 01:06:33,261 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [789 Valid, 3 Invalid, 3141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3140 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-26 01:06:33,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2022-11-26 01:06:33,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 110. [2022-11-26 01:06:33,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 108 states have (on average 1.0277777777777777) internal successors, (111), 109 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:06:33,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 111 transitions. [2022-11-26 01:06:33,264 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 111 transitions. Word has length 105 [2022-11-26 01:06:33,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:06:33,264 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 111 transitions. [2022-11-26 01:06:33,264 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 108 states, 107 states have (on average 2.383177570093458) internal successors, (255), 108 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:06:33,264 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 111 transitions. [2022-11-26 01:06:33,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-11-26 01:06:33,265 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:06:33,265 INFO L195 NwaCegarLoop]: trace histogram [21, 20, 20, 20, 20, 1, 1, 1, 1, 1] [2022-11-26 01:06:33,280 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (61)] Forceful destruction successful, exit code 0 [2022-11-26 01:06:33,480 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable69,61 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:06:33,480 INFO L420 AbstractCegarLoop]: === Iteration 71 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:06:33,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:06:33,481 INFO L85 PathProgramCache]: Analyzing trace with hash -682832770, now seen corresponding path program 20 times [2022-11-26 01:06:33,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:06:33,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454427352] [2022-11-26 01:06:33,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:06:33,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:06:33,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:06:36,573 INFO L134 CoverageAnalysis]: Checked inductivity of 1010 backedges. 324 proven. 686 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:06:36,573 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:06:36,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1454427352] [2022-11-26 01:06:36,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1454427352] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:06:36,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [512510563] [2022-11-26 01:06:36,574 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:06:36,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:06:36,574 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:06:36,575 INFO L229 MonitoredProcess]: Starting monitored process 62 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:06:36,577 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (62)] Waiting until timeout for monitored process [2022-11-26 01:06:54,337 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 21 check-sat command(s) [2022-11-26 01:06:54,337 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:06:54,358 INFO L263 TraceCheckSpWp]: Trace formula consists of 807 conjuncts, 156 conjunts are in the unsatisfiable core [2022-11-26 01:06:54,363 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:06:54,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:06:54,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 01:06:58,430 INFO L134 CoverageAnalysis]: Checked inductivity of 1010 backedges. 343 proven. 667 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:06:58,430 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:07:02,903 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:07:03,015 INFO L134 CoverageAnalysis]: Checked inductivity of 1010 backedges. 400 proven. 610 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:07:03,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [512510563] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:07:03,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1501900000] [2022-11-26 01:07:03,016 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:07:03,016 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:07:03,016 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:07:03,016 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:07:03,016 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:07:03,044 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:07:03,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:07:03,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:03,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:03,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:03,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:03,207 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:07:03,236 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:07:03,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:07:03,300 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:07:03,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:07:03,357 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:07:03,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:07:03,369 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:07:05,524 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35756#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:07:05,524 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:07:05,524 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:07:05,524 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [44, 45, 44] total 133 [2022-11-26 01:07:05,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822190765] [2022-11-26 01:07:05,525 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:07:05,525 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 135 states [2022-11-26 01:07:05,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:07:05,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 135 interpolants. [2022-11-26 01:07:05,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1747, Invalid=18559, Unknown=0, NotChecked=0, Total=20306 [2022-11-26 01:07:05,526 INFO L87 Difference]: Start difference. First operand 110 states and 111 transitions. Second operand has 135 states, 134 states have (on average 2.373134328358209) internal successors, (318), 134 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:07:14,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:07:14,905 INFO L93 Difference]: Finished difference Result 112 states and 113 transitions. [2022-11-26 01:07:14,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-11-26 01:07:14,906 INFO L78 Accepts]: Start accepts. Automaton has has 135 states, 134 states have (on average 2.373134328358209) internal successors, (318), 134 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 106 [2022-11-26 01:07:14,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:07:14,906 INFO L225 Difference]: With dead ends: 112 [2022-11-26 01:07:14,906 INFO L226 Difference]: Without dead ends: 112 [2022-11-26 01:07:14,909 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 423 GetRequests, 219 SyntacticMatches, 0 SemanticMatches, 204 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9654 ImplicationChecksByTransitivity, 18.3s TimeCoverageRelationStatistics Valid=6271, Invalid=35959, Unknown=0, NotChecked=0, Total=42230 [2022-11-26 01:07:14,909 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 1245 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3399 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1245 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 3421 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 3399 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-26 01:07:14,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1245 Valid, 0 Invalid, 3421 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 3399 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-11-26 01:07:14,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2022-11-26 01:07:14,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 111. [2022-11-26 01:07:14,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 109 states have (on average 1.0275229357798166) internal successors, (112), 110 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:07:14,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 112 transitions. [2022-11-26 01:07:14,912 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 112 transitions. Word has length 106 [2022-11-26 01:07:14,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:07:14,912 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 112 transitions. [2022-11-26 01:07:14,913 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 135 states, 134 states have (on average 2.373134328358209) internal successors, (318), 134 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:07:14,913 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 112 transitions. [2022-11-26 01:07:14,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-26 01:07:14,913 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:07:14,914 INFO L195 NwaCegarLoop]: trace histogram [21, 21, 21, 20, 20, 1, 1, 1, 1, 1] [2022-11-26 01:07:14,926 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (62)] Forceful destruction successful, exit code 0 [2022-11-26 01:07:15,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable70,62 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:07:15,123 INFO L420 AbstractCegarLoop]: === Iteration 72 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:07:15,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:07:15,123 INFO L85 PathProgramCache]: Analyzing trace with hash 927704581, now seen corresponding path program 40 times [2022-11-26 01:07:15,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:07:15,123 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [719843603] [2022-11-26 01:07:15,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:07:15,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:07:15,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:07:18,811 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 21 proven. 1030 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:07:18,811 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:07:18,811 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [719843603] [2022-11-26 01:07:18,811 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [719843603] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:07:18,811 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1103370734] [2022-11-26 01:07:18,811 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:07:18,811 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:07:18,811 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:07:18,813 INFO L229 MonitoredProcess]: Starting monitored process 63 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:07:18,819 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (63)] Waiting until timeout for monitored process [2022-11-26 01:07:19,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:07:19,348 INFO L263 TraceCheckSpWp]: Trace formula consists of 824 conjuncts, 210 conjunts are in the unsatisfiable core [2022-11-26 01:07:19,355 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:07:19,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:07:20,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:20,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 01:07:20,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:07:21,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 01:07:21,326 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 21 proven. 1030 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:07:21,326 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:07:21,469 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 01:07:21,478 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 01:07:21,487 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 01:07:21,496 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-11-26 01:07:21,640 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-11-26 01:07:21,650 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-26 01:07:21,935 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-11-26 01:07:21,944 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-11-26 01:07:22,091 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 14)) 0)) is different from false [2022-11-26 01:07:22,240 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 16)) 0)) is different from false [2022-11-26 01:07:22,680 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 20)) 0)) is different from false [2022-11-26 01:07:22,690 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:07:22,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 01:07:22,695 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:07:22,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 01:07:23,160 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 21 proven. 535 refuted. 0 times theorem prover too weak. 0 trivial. 495 not checked. [2022-11-26 01:07:23,160 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1103370734] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:07:23,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [277660965] [2022-11-26 01:07:23,162 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:07:23,162 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:07:23,162 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:07:23,162 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:07:23,162 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:07:23,190 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:07:23,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:07:23,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:07:23,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:23,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:23,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:23,394 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:07:23,423 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:07:23,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:07:23,618 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-11-26 01:07:23,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-11-26 01:07:23,821 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:07:23,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:07:23,866 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:07:23,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:07:23,879 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:07:25,732 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '36849#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:07:25,732 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:07:25,732 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:07:25,733 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [47, 48, 48] total 94 [2022-11-26 01:07:25,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055625058] [2022-11-26 01:07:25,733 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:07:25,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 94 states [2022-11-26 01:07:25,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:07:25,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 94 interpolants. [2022-11-26 01:07:25,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=259, Invalid=7742, Unknown=233, NotChecked=2068, Total=10302 [2022-11-26 01:07:25,734 INFO L87 Difference]: Start difference. First operand 111 states and 112 transitions. Second operand has 94 states, 94 states have (on average 2.3297872340425534) internal successors, (219), 94 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:07:32,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:07:32,399 INFO L93 Difference]: Finished difference Result 178 states and 179 transitions. [2022-11-26 01:07:32,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-11-26 01:07:32,399 INFO L78 Accepts]: Start accepts. Automaton has has 94 states, 94 states have (on average 2.3297872340425534) internal successors, (219), 94 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 108 [2022-11-26 01:07:32,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:07:32,400 INFO L225 Difference]: With dead ends: 178 [2022-11-26 01:07:32,400 INFO L226 Difference]: Without dead ends: 114 [2022-11-26 01:07:32,401 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 429 GetRequests, 286 SyntacticMatches, 7 SemanticMatches, 136 ConstructedPredicates, 11 IntricatePredicates, 0 DeprecatedPredicates, 2095 ImplicationChecksByTransitivity, 9.3s TimeCoverageRelationStatistics Valid=524, Invalid=15288, Unknown=234, NotChecked=2860, Total=18906 [2022-11-26 01:07:32,401 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 215 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 6430 mSolverCounterSat, 21 mSolverCounterUnsat, 95 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 7660 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 6430 IncrementalHoareTripleChecker+Invalid, 95 IncrementalHoareTripleChecker+Unknown, 1114 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-26 01:07:32,402 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 132 Invalid, 7660 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 6430 Invalid, 95 Unknown, 1114 Unchecked, 3.4s Time] [2022-11-26 01:07:32,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2022-11-26 01:07:32,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 113. [2022-11-26 01:07:32,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 111 states have (on average 1.027027027027027) internal successors, (114), 112 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:07:32,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 114 transitions. [2022-11-26 01:07:32,404 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 114 transitions. Word has length 108 [2022-11-26 01:07:32,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:07:32,404 INFO L495 AbstractCegarLoop]: Abstraction has 113 states and 114 transitions. [2022-11-26 01:07:32,405 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 94 states, 94 states have (on average 2.3297872340425534) internal successors, (219), 94 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:07:32,405 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 114 transitions. [2022-11-26 01:07:32,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-11-26 01:07:32,405 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:07:32,406 INFO L195 NwaCegarLoop]: trace histogram [21, 21, 21, 21, 21, 1, 1, 1, 1, 1] [2022-11-26 01:07:32,415 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (63)] Ended with exit code 0 [2022-11-26 01:07:32,614 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable71,63 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:07:32,614 INFO L420 AbstractCegarLoop]: === Iteration 73 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:07:32,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:07:32,614 INFO L85 PathProgramCache]: Analyzing trace with hash 2110983374, now seen corresponding path program 41 times [2022-11-26 01:07:32,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:07:32,614 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542349241] [2022-11-26 01:07:32,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:07:32,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:07:32,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:07:34,723 INFO L134 CoverageAnalysis]: Checked inductivity of 1092 backedges. 361 proven. 731 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:07:34,723 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:07:34,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542349241] [2022-11-26 01:07:34,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542349241] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:07:34,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [391380068] [2022-11-26 01:07:34,724 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 01:07:34,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:07:34,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:07:34,725 INFO L229 MonitoredProcess]: Starting monitored process 64 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:07:34,727 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (64)] Waiting until timeout for monitored process [2022-11-26 01:07:52,162 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 22 check-sat command(s) [2022-11-26 01:07:52,163 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:07:52,186 INFO L263 TraceCheckSpWp]: Trace formula consists of 837 conjuncts, 97 conjunts are in the unsatisfiable core [2022-11-26 01:07:52,190 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:07:54,201 INFO L134 CoverageAnalysis]: Checked inductivity of 1092 backedges. 400 proven. 692 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:07:54,202 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:07:55,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-26 01:07:56,774 INFO L134 CoverageAnalysis]: Checked inductivity of 1092 backedges. 400 proven. 692 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:07:56,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [391380068] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:07:56,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1909224591] [2022-11-26 01:07:56,775 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:07:56,776 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:07:56,776 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:07:56,776 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:07:56,776 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:07:56,802 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:07:56,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:07:56,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:07:56,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:56,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:56,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:07:56,968 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:07:56,991 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:07:56,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:07:57,148 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-11-26 01:07:57,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 205 treesize of output 218 [2022-11-26 01:07:57,351 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:07:57,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:07:57,395 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:07:57,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:07:57,405 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:07:58,987 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37992#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:07:58,988 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:07:58,988 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:07:58,988 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [45, 46, 46] total 113 [2022-11-26 01:07:58,988 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1497543887] [2022-11-26 01:07:58,988 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:07:58,988 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 114 states [2022-11-26 01:07:58,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:07:58,989 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 114 interpolants. [2022-11-26 01:07:58,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2097, Invalid=12665, Unknown=0, NotChecked=0, Total=14762 [2022-11-26 01:07:58,990 INFO L87 Difference]: Start difference. First operand 113 states and 114 transitions. Second operand has 114 states, 113 states have (on average 2.5132743362831858) internal successors, (284), 114 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:00,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:08:00,736 INFO L93 Difference]: Finished difference Result 118 states and 119 transitions. [2022-11-26 01:08:00,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-11-26 01:08:00,737 INFO L78 Accepts]: Start accepts. Automaton has has 114 states, 113 states have (on average 2.5132743362831858) internal successors, (284), 114 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 110 [2022-11-26 01:08:00,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:08:00,737 INFO L225 Difference]: With dead ends: 118 [2022-11-26 01:08:00,737 INFO L226 Difference]: Without dead ends: 118 [2022-11-26 01:08:00,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 397 GetRequests, 231 SyntacticMatches, 22 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8535 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=3792, Invalid=17378, Unknown=0, NotChecked=0, Total=21170 [2022-11-26 01:08:00,739 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 304 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1704 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 304 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1705 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1704 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-26 01:08:00,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [304 Valid, 3 Invalid, 1705 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1704 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-26 01:08:00,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2022-11-26 01:08:00,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 115. [2022-11-26 01:08:00,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 115 states, 113 states have (on average 1.0265486725663717) internal successors, (116), 114 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:00,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 115 states to 115 states and 116 transitions. [2022-11-26 01:08:00,741 INFO L78 Accepts]: Start accepts. Automaton has 115 states and 116 transitions. Word has length 110 [2022-11-26 01:08:00,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:08:00,742 INFO L495 AbstractCegarLoop]: Abstraction has 115 states and 116 transitions. [2022-11-26 01:08:00,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 114 states, 113 states have (on average 2.5132743362831858) internal successors, (284), 114 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:00,742 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 116 transitions. [2022-11-26 01:08:00,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-11-26 01:08:00,743 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:08:00,743 INFO L195 NwaCegarLoop]: trace histogram [22, 21, 21, 21, 21, 1, 1, 1, 1, 1] [2022-11-26 01:08:00,759 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (64)] Forceful destruction successful, exit code 0 [2022-11-26 01:08:00,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable72,64 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:08:00,943 INFO L420 AbstractCegarLoop]: === Iteration 74 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:08:00,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:08:00,944 INFO L85 PathProgramCache]: Analyzing trace with hash 1015975141, now seen corresponding path program 21 times [2022-11-26 01:08:00,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:08:00,944 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1331478895] [2022-11-26 01:08:00,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:08:00,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:08:01,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:08:03,930 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 361 proven. 752 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:03,930 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:08:03,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1331478895] [2022-11-26 01:08:03,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1331478895] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:08:03,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [202980464] [2022-11-26 01:08:03,930 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:08:03,930 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:08:03,930 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:08:03,931 INFO L229 MonitoredProcess]: Starting monitored process 65 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:08:03,935 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (65)] Waiting until timeout for monitored process [2022-11-26 01:08:08,291 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:08:08,291 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:08:08,303 INFO L263 TraceCheckSpWp]: Trace formula consists of 843 conjuncts, 180 conjunts are in the unsatisfiable core [2022-11-26 01:08:08,307 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:08:08,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:08:08,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-26 01:08:08,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:08:12,401 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 400 proven. 713 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:12,402 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:08:17,205 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:08:17,333 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 441 proven. 672 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:17,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [202980464] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:08:17,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [49723245] [2022-11-26 01:08:17,335 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:08:17,335 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:08:17,335 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:08:17,335 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:08:17,335 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:08:17,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:08:17,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:08:17,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:17,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:17,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:17,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:17,570 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:08:17,602 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:08:17,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:08:17,664 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:08:17,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:08:17,718 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:08:17,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:08:17,725 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:08:20,127 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39079#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:08:20,127 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:08:20,128 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:08:20,128 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [46, 45, 45] total 136 [2022-11-26 01:08:20,128 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141726623] [2022-11-26 01:08:20,128 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:08:20,129 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 138 states [2022-11-26 01:08:20,129 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:08:20,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 138 interpolants. [2022-11-26 01:08:20,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1724, Invalid=19446, Unknown=0, NotChecked=0, Total=21170 [2022-11-26 01:08:20,131 INFO L87 Difference]: Start difference. First operand 115 states and 116 transitions. Second operand has 138 states, 137 states have (on average 2.4306569343065694) internal successors, (333), 137 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:26,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:08:26,423 INFO L93 Difference]: Finished difference Result 117 states and 118 transitions. [2022-11-26 01:08:26,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2022-11-26 01:08:26,423 INFO L78 Accepts]: Start accepts. Automaton has has 138 states, 137 states have (on average 2.4306569343065694) internal successors, (333), 137 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 111 [2022-11-26 01:08:26,423 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:08:26,424 INFO L225 Difference]: With dead ends: 117 [2022-11-26 01:08:26,424 INFO L226 Difference]: Without dead ends: 117 [2022-11-26 01:08:26,425 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 422 GetRequests, 233 SyntacticMatches, 0 SemanticMatches, 189 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8612 ImplicationChecksByTransitivity, 15.0s TimeCoverageRelationStatistics Valid=5196, Invalid=31094, Unknown=0, NotChecked=0, Total=36290 [2022-11-26 01:08:26,425 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 880 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 5587 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 880 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 5588 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 5587 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-26 01:08:26,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [880 Valid, 0 Invalid, 5588 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 5587 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-26 01:08:26,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-11-26 01:08:26,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 116. [2022-11-26 01:08:26,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 114 states have (on average 1.0263157894736843) internal successors, (117), 115 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:26,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 117 transitions. [2022-11-26 01:08:26,427 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 117 transitions. Word has length 111 [2022-11-26 01:08:26,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:08:26,427 INFO L495 AbstractCegarLoop]: Abstraction has 116 states and 117 transitions. [2022-11-26 01:08:26,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 138 states, 137 states have (on average 2.4306569343065694) internal successors, (333), 137 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:26,427 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 117 transitions. [2022-11-26 01:08:26,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-11-26 01:08:26,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:08:26,428 INFO L195 NwaCegarLoop]: trace histogram [22, 22, 22, 21, 21, 1, 1, 1, 1, 1] [2022-11-26 01:08:26,439 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (65)] Ended with exit code 0 [2022-11-26 01:08:26,628 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable73,65 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:08:26,629 INFO L420 AbstractCegarLoop]: === Iteration 75 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:08:26,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:08:26,629 INFO L85 PathProgramCache]: Analyzing trace with hash 1394534572, now seen corresponding path program 42 times [2022-11-26 01:08:26,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:08:26,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774847545] [2022-11-26 01:08:26,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:08:26,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:08:26,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:08:30,584 INFO L134 CoverageAnalysis]: Checked inductivity of 1156 backedges. 22 proven. 1134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:30,584 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:08:30,584 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774847545] [2022-11-26 01:08:30,584 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774847545] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:08:30,584 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1905173245] [2022-11-26 01:08:30,584 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 01:08:30,584 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:08:30,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:08:30,585 INFO L229 MonitoredProcess]: Starting monitored process 66 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:08:30,589 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (66)] Waiting until timeout for monitored process [2022-11-26 01:08:35,081 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 01:08:35,081 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 01:08:35,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 860 conjuncts, 217 conjunts are in the unsatisfiable core [2022-11-26 01:08:35,099 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:08:35,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-26 01:08:36,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:36,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-26 01:08:36,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:36,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 01:08:37,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-26 01:08:37,247 INFO L134 CoverageAnalysis]: Checked inductivity of 1156 backedges. 22 proven. 1134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:37,247 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:08:37,257 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-11-26 01:08:37,264 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-11-26 01:08:37,273 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-11-26 01:08:37,282 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-11-26 01:08:37,441 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-11-26 01:08:37,598 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-11-26 01:08:37,607 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-11-26 01:08:37,617 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2022-11-26 01:08:37,626 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-11-26 01:08:37,636 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-11-26 01:08:38,258 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 17)) 0)) is different from false [2022-11-26 01:08:38,268 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 18)) 0)) is different from false [2022-11-26 01:08:38,435 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 20)) 0)) is different from false [2022-11-26 01:08:38,623 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:08:38,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-26 01:08:38,629 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-26 01:08:38,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-26 01:08:39,099 INFO L134 CoverageAnalysis]: Checked inductivity of 1156 backedges. 22 proven. 558 refuted. 0 times theorem prover too weak. 0 trivial. 576 not checked. [2022-11-26 01:08:39,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1905173245] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:08:39,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1871410051] [2022-11-26 01:08:39,101 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:08:39,101 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:08:39,101 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:08:39,101 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:08:39,101 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:08:39,126 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:08:39,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:08:39,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:39,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:39,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:39,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:39,297 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:08:39,321 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:08:39,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:08:39,391 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:08:39,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:08:39,437 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:08:39,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:08:39,447 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:08:41,475 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40180#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:08:41,475 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:08:41,475 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:08:41,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [49, 50, 50] total 98 [2022-11-26 01:08:41,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565128529] [2022-11-26 01:08:41,476 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:08:41,476 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 98 states [2022-11-26 01:08:41,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:08:41,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 98 interpolants. [2022-11-26 01:08:41,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=268, Invalid=8153, Unknown=187, NotChecked=2522, Total=11130 [2022-11-26 01:08:41,477 INFO L87 Difference]: Start difference. First operand 116 states and 117 transitions. Second operand has 98 states, 98 states have (on average 2.336734693877551) internal successors, (229), 98 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:49,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 01:08:49,205 INFO L93 Difference]: Finished difference Result 186 states and 187 transitions. [2022-11-26 01:08:49,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-11-26 01:08:49,206 INFO L78 Accepts]: Start accepts. Automaton has has 98 states, 98 states have (on average 2.336734693877551) internal successors, (229), 98 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 113 [2022-11-26 01:08:49,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 01:08:49,206 INFO L225 Difference]: With dead ends: 186 [2022-11-26 01:08:49,206 INFO L226 Difference]: Without dead ends: 119 [2022-11-26 01:08:49,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 452 GetRequests, 300 SyntacticMatches, 7 SemanticMatches, 145 ConstructedPredicates, 13 IntricatePredicates, 0 DeprecatedPredicates, 2342 ImplicationChecksByTransitivity, 10.5s TimeCoverageRelationStatistics Valid=579, Invalid=17105, Unknown=190, NotChecked=3588, Total=21462 [2022-11-26 01:08:49,220 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 163 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 6918 mSolverCounterSat, 22 mSolverCounterUnsat, 47 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 8433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 6918 IncrementalHoareTripleChecker+Invalid, 47 IncrementalHoareTripleChecker+Unknown, 1446 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-26 01:08:49,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 134 Invalid, 8433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 6918 Invalid, 47 Unknown, 1446 Unchecked, 3.8s Time] [2022-11-26 01:08:49,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2022-11-26 01:08:49,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 118. [2022-11-26 01:08:49,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 116 states have (on average 1.0258620689655173) internal successors, (119), 117 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:49,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 119 transitions. [2022-11-26 01:08:49,223 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 119 transitions. Word has length 113 [2022-11-26 01:08:49,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 01:08:49,223 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 119 transitions. [2022-11-26 01:08:49,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 98 states, 98 states have (on average 2.336734693877551) internal successors, (229), 98 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 01:08:49,223 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 119 transitions. [2022-11-26 01:08:49,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2022-11-26 01:08:49,224 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 01:08:49,224 INFO L195 NwaCegarLoop]: trace histogram [22, 22, 22, 22, 22, 1, 1, 1, 1, 1] [2022-11-26 01:08:49,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (66)] Forceful destruction successful, exit code 0 [2022-11-26 01:08:49,438 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable74,66 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:08:49,438 INFO L420 AbstractCegarLoop]: === Iteration 76 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-11-26 01:08:49,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 01:08:49,438 INFO L85 PathProgramCache]: Analyzing trace with hash 1850038147, now seen corresponding path program 43 times [2022-11-26 01:08:49,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 01:08:49,439 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1373894281] [2022-11-26 01:08:49,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 01:08:49,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 01:08:49,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:08:52,225 INFO L134 CoverageAnalysis]: Checked inductivity of 1199 backedges. 400 proven. 799 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:52,225 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 01:08:52,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1373894281] [2022-11-26 01:08:52,225 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1373894281] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 01:08:52,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2079011341] [2022-11-26 01:08:52,225 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 01:08:52,226 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 01:08:52,226 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 01:08:52,226 INFO L229 MonitoredProcess]: Starting monitored process 67 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 01:08:52,229 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_563e6d4e-2dc2-415d-94dc-a21488540a04/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (67)] Waiting until timeout for monitored process [2022-11-26 01:08:52,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 01:08:52,804 INFO L263 TraceCheckSpWp]: Trace formula consists of 873 conjuncts, 122 conjunts are in the unsatisfiable core [2022-11-26 01:08:52,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 01:08:54,074 INFO L134 CoverageAnalysis]: Checked inductivity of 1199 backedges. 441 proven. 758 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:54,075 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 01:08:55,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-26 01:08:56,699 INFO L134 CoverageAnalysis]: Checked inductivity of 1199 backedges. 441 proven. 758 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 01:08:56,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2079011341] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 01:08:56,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2083434680] [2022-11-26 01:08:56,700 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-26 01:08:56,700 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 01:08:56,700 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 01:08:56,700 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 01:08:56,700 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 01:08:56,726 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 01:08:56,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-26 01:08:56,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 01:08:56,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:56,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:56,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 01:08:56,898 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:08:56,921 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-11-26 01:08:56,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-11-26 01:08:57,024 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 01:08:57,129 INFO L321 Elim1Store]: treesize reduction 167, result has 22.3 percent of original size [2022-11-26 01:08:57,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-11-26 01:08:57,390 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:08:57,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:08:57,434 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-26 01:08:57,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-26 01:08:57,447 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 01:08:59,111 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '41359#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-11-26 01:08:59,111 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 01:08:59,112 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-26 01:08:59,112 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [47, 48, 48] total 96 [2022-11-26 01:08:59,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288379762] [2022-11-26 01:08:59,112 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-26 01:08:59,112 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2022-11-26 01:08:59,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 01:08:59,113 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2022-11-26 01:08:59,113 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1228, Invalid=9692, Unknown=0, NotChecked=0, Total=10920 [2022-11-26 01:08:59,113 INFO L87 Difference]: Start difference. First operand 118 states and 119 transitions. Second operand has 97 states, 96 states have (on average 2.4270833333333335) internal successors, (233), 97 states have internal predecessors, (233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)