./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/termination-memory-alloca/openbsd_cstpcpy-alloca-2.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/termination-memory-alloca/openbsd_cstpcpy-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/config/svcomp-DerefFreeMemtrack-64bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5 --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash bebfef36417cc629a011ca1d30e6696f3048116bc9623a75bf9b2a872de91ab8 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 19:42:02,528 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 19:42:02,665 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/config/svcomp-DerefFreeMemtrack-64bit-Taipan_Default.epf [2023-11-21 19:42:02,669 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 19:42:02,670 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 19:42:02,706 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 19:42:02,707 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 19:42:02,707 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 19:42:02,708 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 19:42:02,709 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 19:42:02,710 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-21 19:42:02,710 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-21 19:42:02,711 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-21 19:42:02,711 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-21 19:42:02,712 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-21 19:42:02,713 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-21 19:42:02,713 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-21 19:42:02,714 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-21 19:42:02,714 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-21 19:42:02,715 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-21 19:42:02,715 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-21 19:42:02,716 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-21 19:42:02,717 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 19:42:02,717 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 19:42:02,718 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 19:42:02,718 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 19:42:02,719 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 19:42:02,719 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-11-21 19:42:02,720 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2023-11-21 19:42:02,720 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-11-21 19:42:02,720 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 19:42:02,721 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-11-21 19:42:02,721 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-21 19:42:02,722 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 19:42:02,722 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 19:42:02,722 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 19:42:02,722 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 19:42:02,723 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 19:42:02,723 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 19:42:02,723 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 19:42:02,723 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-21 19:42:02,724 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 19:42:02,724 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 19:42:02,724 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-21 19:42:02,724 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 19:42:02,725 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bebfef36417cc629a011ca1d30e6696f3048116bc9623a75bf9b2a872de91ab8 [2023-11-21 19:42:02,972 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 19:42:02,996 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 19:42:02,999 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 19:42:03,000 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 19:42:03,001 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 19:42:03,002 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/../../sv-benchmarks/c/termination-memory-alloca/openbsd_cstpcpy-alloca-2.i [2023-11-21 19:42:06,269 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 19:42:06,668 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 19:42:06,671 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/sv-benchmarks/c/termination-memory-alloca/openbsd_cstpcpy-alloca-2.i [2023-11-21 19:42:06,699 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/data/dddadc012/928edfc106f54acc9024d2180c794647/FLAGa5b638494 [2023-11-21 19:42:06,723 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/data/dddadc012/928edfc106f54acc9024d2180c794647 [2023-11-21 19:42:06,733 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 19:42:06,735 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 19:42:06,739 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 19:42:06,739 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 19:42:06,747 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 19:42:06,747 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 07:42:06" (1/1) ... [2023-11-21 19:42:06,748 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@46425710 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:06, skipping insertion in model container [2023-11-21 19:42:06,749 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 07:42:06" (1/1) ... [2023-11-21 19:42:06,794 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 19:42:07,107 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 19:42:07,121 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 19:42:07,196 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 19:42:07,234 INFO L206 MainTranslator]: Completed translation [2023-11-21 19:42:07,235 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07 WrapperNode [2023-11-21 19:42:07,235 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 19:42:07,237 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 19:42:07,237 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 19:42:07,237 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 19:42:07,246 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,262 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,283 INFO L138 Inliner]: procedures = 111, calls = 12, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 54 [2023-11-21 19:42:07,283 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 19:42:07,284 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 19:42:07,284 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 19:42:07,285 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 19:42:07,294 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,295 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,299 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,302 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,308 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,317 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,319 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,320 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,323 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 19:42:07,324 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 19:42:07,324 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 19:42:07,324 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 19:42:07,325 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (1/1) ... [2023-11-21 19:42:07,334 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 19:42:07,348 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 [2023-11-21 19:42:07,365 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 19:42:07,388 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 19:42:07,408 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-21 19:42:07,408 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-21 19:42:07,408 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-21 19:42:07,408 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-21 19:42:07,408 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 19:42:07,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 19:42:07,521 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 19:42:07,523 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 19:42:07,685 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 19:42:07,769 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 19:42:07,770 INFO L308 CfgBuilder]: Removed 1 assume(true) statements. [2023-11-21 19:42:07,772 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 07:42:07 BoogieIcfgContainer [2023-11-21 19:42:07,777 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 19:42:07,780 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 19:42:07,780 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 19:42:07,785 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 19:42:07,786 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 07:42:06" (1/3) ... [2023-11-21 19:42:07,787 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2deaac7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 07:42:07, skipping insertion in model container [2023-11-21 19:42:07,787 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 07:42:07" (2/3) ... [2023-11-21 19:42:07,790 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2deaac7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 07:42:07, skipping insertion in model container [2023-11-21 19:42:07,790 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 07:42:07" (3/3) ... [2023-11-21 19:42:07,793 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstpcpy-alloca-2.i [2023-11-21 19:42:07,814 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 19:42:07,815 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 7 error locations. [2023-11-21 19:42:07,858 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 19:42:07,865 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4d3b7f9b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 19:42:07,866 INFO L358 AbstractCegarLoop]: Starting to check reachability of 7 error locations. [2023-11-21 19:42:07,870 INFO L276 IsEmpty]: Start isEmpty. Operand has 16 states, 8 states have (on average 2.25) internal successors, (18), 15 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:07,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-11-21 19:42:07,875 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:07,876 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-11-21 19:42:07,876 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:07,881 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:07,882 INFO L85 PathProgramCache]: Analyzing trace with hash 86103, now seen corresponding path program 1 times [2023-11-21 19:42:07,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:07,890 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843525715] [2023-11-21 19:42:07,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:07,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:08,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:08,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:08,170 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:08,170 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843525715] [2023-11-21 19:42:08,171 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843525715] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:08,171 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:08,172 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2023-11-21 19:42:08,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910417428] [2023-11-21 19:42:08,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:08,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 19:42:08,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:08,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 19:42:08,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 19:42:08,227 INFO L87 Difference]: Start difference. First operand has 16 states, 8 states have (on average 2.25) internal successors, (18), 15 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:08,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:08,302 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2023-11-21 19:42:08,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 19:42:08,316 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-11-21 19:42:08,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:08,325 INFO L225 Difference]: With dead ends: 17 [2023-11-21 19:42:08,326 INFO L226 Difference]: Without dead ends: 15 [2023-11-21 19:42:08,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 19:42:08,338 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:08,340 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 15 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 19:42:08,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2023-11-21 19:42:08,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2023-11-21 19:42:08,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 8 states have (on average 1.875) internal successors, (15), 14 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:08,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 15 transitions. [2023-11-21 19:42:08,373 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 15 transitions. Word has length 3 [2023-11-21 19:42:08,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:08,373 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 15 transitions. [2023-11-21 19:42:08,373 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:08,373 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 15 transitions. [2023-11-21 19:42:08,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-11-21 19:42:08,374 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:08,374 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-11-21 19:42:08,374 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 19:42:08,374 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:08,375 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:08,375 INFO L85 PathProgramCache]: Analyzing trace with hash 86139, now seen corresponding path program 1 times [2023-11-21 19:42:08,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:08,376 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [91092122] [2023-11-21 19:42:08,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:08,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:08,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:08,584 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:08,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:08,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [91092122] [2023-11-21 19:42:08,585 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [91092122] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:08,585 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:08,586 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 19:42:08,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484720694] [2023-11-21 19:42:08,586 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:08,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 19:42:08,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:08,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 19:42:08,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 19:42:08,588 INFO L87 Difference]: Start difference. First operand 15 states and 15 transitions. Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:08,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:08,608 INFO L93 Difference]: Finished difference Result 14 states and 14 transitions. [2023-11-21 19:42:08,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 19:42:08,609 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-11-21 19:42:08,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:08,610 INFO L225 Difference]: With dead ends: 14 [2023-11-21 19:42:08,610 INFO L226 Difference]: Without dead ends: 14 [2023-11-21 19:42:08,615 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 19:42:08,617 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 10 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:08,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 5 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:08,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14 states. [2023-11-21 19:42:08,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14 to 14. [2023-11-21 19:42:08,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 8 states have (on average 1.75) internal successors, (14), 13 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:08,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 14 transitions. [2023-11-21 19:42:08,625 INFO L78 Accepts]: Start accepts. Automaton has 14 states and 14 transitions. Word has length 3 [2023-11-21 19:42:08,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:08,626 INFO L495 AbstractCegarLoop]: Abstraction has 14 states and 14 transitions. [2023-11-21 19:42:08,626 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:08,627 INFO L276 IsEmpty]: Start isEmpty. Operand 14 states and 14 transitions. [2023-11-21 19:42:08,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-11-21 19:42:08,627 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:08,628 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-11-21 19:42:08,628 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 19:42:08,628 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:08,629 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:08,630 INFO L85 PathProgramCache]: Analyzing trace with hash 86140, now seen corresponding path program 1 times [2023-11-21 19:42:08,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:08,631 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012761936] [2023-11-21 19:42:08,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:08,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:08,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:09,037 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:09,038 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:09,038 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012761936] [2023-11-21 19:42:09,039 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012761936] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:09,039 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:09,039 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 19:42:09,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296685442] [2023-11-21 19:42:09,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:09,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 19:42:09,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:09,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 19:42:09,041 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 19:42:09,042 INFO L87 Difference]: Start difference. First operand 14 states and 14 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:09,070 INFO L93 Difference]: Finished difference Result 13 states and 13 transitions. [2023-11-21 19:42:09,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 19:42:09,071 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-11-21 19:42:09,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:09,072 INFO L225 Difference]: With dead ends: 13 [2023-11-21 19:42:09,072 INFO L226 Difference]: Without dead ends: 13 [2023-11-21 19:42:09,073 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 19:42:09,075 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 11 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:09,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 4 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:09,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13 states. [2023-11-21 19:42:09,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13 to 13. [2023-11-21 19:42:09,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 8 states have (on average 1.625) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 13 transitions. [2023-11-21 19:42:09,080 INFO L78 Accepts]: Start accepts. Automaton has 13 states and 13 transitions. Word has length 3 [2023-11-21 19:42:09,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:09,080 INFO L495 AbstractCegarLoop]: Abstraction has 13 states and 13 transitions. [2023-11-21 19:42:09,081 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,081 INFO L276 IsEmpty]: Start isEmpty. Operand 13 states and 13 transitions. [2023-11-21 19:42:09,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-11-21 19:42:09,082 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:09,082 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-11-21 19:42:09,082 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 19:42:09,082 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:09,083 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:09,083 INFO L85 PathProgramCache]: Analyzing trace with hash 2671298, now seen corresponding path program 1 times [2023-11-21 19:42:09,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:09,084 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2088056010] [2023-11-21 19:42:09,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:09,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:09,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:09,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:09,142 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:09,142 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2088056010] [2023-11-21 19:42:09,143 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2088056010] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:09,143 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:09,143 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 19:42:09,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [290014836] [2023-11-21 19:42:09,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:09,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 19:42:09,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:09,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 19:42:09,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 19:42:09,146 INFO L87 Difference]: Start difference. First operand 13 states and 13 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:09,167 INFO L93 Difference]: Finished difference Result 12 states and 12 transitions. [2023-11-21 19:42:09,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 19:42:09,168 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-11-21 19:42:09,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:09,169 INFO L225 Difference]: With dead ends: 12 [2023-11-21 19:42:09,169 INFO L226 Difference]: Without dead ends: 12 [2023-11-21 19:42:09,169 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 19:42:09,171 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 6 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:09,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 4 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:09,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12 states. [2023-11-21 19:42:09,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12 to 12. [2023-11-21 19:42:09,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 8 states have (on average 1.5) internal successors, (12), 11 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 12 transitions. [2023-11-21 19:42:09,175 INFO L78 Accepts]: Start accepts. Automaton has 12 states and 12 transitions. Word has length 4 [2023-11-21 19:42:09,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:09,176 INFO L495 AbstractCegarLoop]: Abstraction has 12 states and 12 transitions. [2023-11-21 19:42:09,176 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,177 INFO L276 IsEmpty]: Start isEmpty. Operand 12 states and 12 transitions. [2023-11-21 19:42:09,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-11-21 19:42:09,177 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:09,177 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-11-21 19:42:09,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 19:42:09,178 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:09,178 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:09,179 INFO L85 PathProgramCache]: Analyzing trace with hash 2671299, now seen corresponding path program 1 times [2023-11-21 19:42:09,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:09,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639886586] [2023-11-21 19:42:09,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:09,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:09,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:09,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:09,307 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:09,307 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639886586] [2023-11-21 19:42:09,307 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639886586] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:09,308 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:09,308 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 19:42:09,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1051951963] [2023-11-21 19:42:09,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:09,310 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 19:42:09,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:09,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 19:42:09,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 19:42:09,314 INFO L87 Difference]: Start difference. First operand 12 states and 12 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:09,378 INFO L93 Difference]: Finished difference Result 18 states and 19 transitions. [2023-11-21 19:42:09,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 19:42:09,379 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-11-21 19:42:09,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:09,380 INFO L225 Difference]: With dead ends: 18 [2023-11-21 19:42:09,380 INFO L226 Difference]: Without dead ends: 18 [2023-11-21 19:42:09,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 19:42:09,382 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 22 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:09,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 8 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:09,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2023-11-21 19:42:09,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 13. [2023-11-21 19:42:09,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 9 states have (on average 1.4444444444444444) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 13 transitions. [2023-11-21 19:42:09,386 INFO L78 Accepts]: Start accepts. Automaton has 13 states and 13 transitions. Word has length 4 [2023-11-21 19:42:09,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:09,387 INFO L495 AbstractCegarLoop]: Abstraction has 13 states and 13 transitions. [2023-11-21 19:42:09,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,388 INFO L276 IsEmpty]: Start isEmpty. Operand 13 states and 13 transitions. [2023-11-21 19:42:09,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2023-11-21 19:42:09,388 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:09,388 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2023-11-21 19:42:09,389 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 19:42:09,389 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:09,389 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:09,390 INFO L85 PathProgramCache]: Analyzing trace with hash 82810239, now seen corresponding path program 1 times [2023-11-21 19:42:09,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:09,390 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1340629443] [2023-11-21 19:42:09,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:09,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:09,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:09,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:09,739 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:09,739 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1340629443] [2023-11-21 19:42:09,740 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1340629443] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:09,740 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:09,740 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 19:42:09,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1766458369] [2023-11-21 19:42:09,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:09,741 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 19:42:09,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:09,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 19:42:09,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 19:42:09,744 INFO L87 Difference]: Start difference. First operand 13 states and 13 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:09,835 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2023-11-21 19:42:09,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 19:42:09,836 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2023-11-21 19:42:09,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:09,840 INFO L225 Difference]: With dead ends: 17 [2023-11-21 19:42:09,840 INFO L226 Difference]: Without dead ends: 17 [2023-11-21 19:42:09,842 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-21 19:42:09,845 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 36 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:09,847 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 4 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:09,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2023-11-21 19:42:09,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 14. [2023-11-21 19:42:09,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 10 states have (on average 1.5) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 15 transitions. [2023-11-21 19:42:09,859 INFO L78 Accepts]: Start accepts. Automaton has 14 states and 15 transitions. Word has length 5 [2023-11-21 19:42:09,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:09,859 INFO L495 AbstractCegarLoop]: Abstraction has 14 states and 15 transitions. [2023-11-21 19:42:09,859 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,860 INFO L276 IsEmpty]: Start isEmpty. Operand 14 states and 15 transitions. [2023-11-21 19:42:09,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2023-11-21 19:42:09,860 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:09,860 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2023-11-21 19:42:09,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 19:42:09,861 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:09,861 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:09,861 INFO L85 PathProgramCache]: Analyzing trace with hash 82810238, now seen corresponding path program 1 times [2023-11-21 19:42:09,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:09,862 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909860512] [2023-11-21 19:42:09,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:09,862 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:09,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:09,961 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:09,962 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:09,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909860512] [2023-11-21 19:42:09,962 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909860512] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:09,962 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:09,963 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 19:42:09,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [228368587] [2023-11-21 19:42:09,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:09,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 19:42:09,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:09,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 19:42:09,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 19:42:09,965 INFO L87 Difference]: Start difference. First operand 14 states and 15 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:09,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:09,995 INFO L93 Difference]: Finished difference Result 13 states and 13 transitions. [2023-11-21 19:42:09,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 19:42:09,995 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2023-11-21 19:42:09,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:09,996 INFO L225 Difference]: With dead ends: 13 [2023-11-21 19:42:09,996 INFO L226 Difference]: Without dead ends: 13 [2023-11-21 19:42:09,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-21 19:42:09,997 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 11 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:09,998 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 4 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:09,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13 states. [2023-11-21 19:42:10,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13 to 13. [2023-11-21 19:42:10,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 10 states have (on average 1.3) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:10,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 13 transitions. [2023-11-21 19:42:10,001 INFO L78 Accepts]: Start accepts. Automaton has 13 states and 13 transitions. Word has length 5 [2023-11-21 19:42:10,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:10,001 INFO L495 AbstractCegarLoop]: Abstraction has 13 states and 13 transitions. [2023-11-21 19:42:10,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:10,002 INFO L276 IsEmpty]: Start isEmpty. Operand 13 states and 13 transitions. [2023-11-21 19:42:10,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2023-11-21 19:42:10,002 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:10,002 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2023-11-21 19:42:10,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 19:42:10,003 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:10,003 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:10,004 INFO L85 PathProgramCache]: Analyzing trace with hash -2023739288, now seen corresponding path program 1 times [2023-11-21 19:42:10,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:10,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1048649670] [2023-11-21 19:42:10,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:10,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:10,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:10,350 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:10,350 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:10,350 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1048649670] [2023-11-21 19:42:10,350 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1048649670] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 19:42:10,351 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [437825675] [2023-11-21 19:42:10,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:10,351 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:10,351 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 [2023-11-21 19:42:10,355 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 19:42:10,363 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 19:42:10,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:10,452 INFO L262 TraceCheckSpWp]: Trace formula consists of 91 conjuncts, 27 conjunts are in the unsatisfiable core [2023-11-21 19:42:10,458 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 19:42:10,566 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2023-11-21 19:42:10,642 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 19:42:10,643 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 15 [2023-11-21 19:42:10,726 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:10,726 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 19:42:10,860 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2023-11-21 19:42:10,867 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2023-11-21 19:42:10,877 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2023-11-21 19:42:10,895 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:10,896 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [437825675] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 19:42:10,896 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [340545865] [2023-11-21 19:42:10,918 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2023-11-21 19:42:10,919 INFO L166 IcfgInterpreter]: Building call graph [2023-11-21 19:42:10,925 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-21 19:42:10,931 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-21 19:42:10,932 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-21 19:42:13,514 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-21 19:42:14,676 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '300#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~from#1.base|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~from#1.base|) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~to#1.base|))' at error location [2023-11-21 19:42:14,676 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-21 19:42:14,676 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 19:42:14,676 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 12 [2023-11-21 19:42:14,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [41942922] [2023-11-21 19:42:14,677 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 19:42:14,678 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-11-21 19:42:14,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:14,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-11-21 19:42:14,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=281, Unknown=0, NotChecked=0, Total=342 [2023-11-21 19:42:14,681 INFO L87 Difference]: Start difference. First operand 13 states and 13 transitions. Second operand has 13 states, 12 states have (on average 1.5) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:14,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:14,996 INFO L93 Difference]: Finished difference Result 20 states and 22 transitions. [2023-11-21 19:42:14,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 19:42:14,997 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.5) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2023-11-21 19:42:14,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:14,998 INFO L225 Difference]: With dead ends: 20 [2023-11-21 19:42:14,998 INFO L226 Difference]: Without dead ends: 20 [2023-11-21 19:42:14,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=121, Invalid=479, Unknown=0, NotChecked=0, Total=600 [2023-11-21 19:42:14,999 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 31 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:14,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 15 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 19:42:15,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2023-11-21 19:42:15,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 15. [2023-11-21 19:42:15,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 12 states have (on average 1.3333333333333333) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:15,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2023-11-21 19:42:15,002 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 7 [2023-11-21 19:42:15,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:15,002 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2023-11-21 19:42:15,002 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.5) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:15,002 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2023-11-21 19:42:15,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2023-11-21 19:42:15,007 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:15,007 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1] [2023-11-21 19:42:15,028 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-21 19:42:15,208 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:15,208 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:15,208 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:15,208 INFO L85 PathProgramCache]: Analyzing trace with hash 1688591482, now seen corresponding path program 1 times [2023-11-21 19:42:15,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:15,209 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339407197] [2023-11-21 19:42:15,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:15,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:15,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:15,751 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:15,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:15,751 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339407197] [2023-11-21 19:42:15,752 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [339407197] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 19:42:15,752 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1135598909] [2023-11-21 19:42:15,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:15,752 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:15,753 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 [2023-11-21 19:42:15,754 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 19:42:15,756 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 19:42:15,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:15,830 INFO L262 TraceCheckSpWp]: Trace formula consists of 97 conjuncts, 45 conjunts are in the unsatisfiable core [2023-11-21 19:42:15,834 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 19:42:15,911 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-11-21 19:42:15,921 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-11-21 19:42:15,935 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-11-21 19:42:16,010 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2023-11-21 19:42:16,097 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 19:42:16,098 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 15 [2023-11-21 19:42:16,213 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:16,213 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 19:42:16,386 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2023-11-21 19:42:16,391 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2023-11-21 19:42:16,466 INFO L173 IndexEqualityManager]: detected equality via solver [2023-11-21 19:42:16,504 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:16,504 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1135598909] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 19:42:16,504 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [885785581] [2023-11-21 19:42:16,510 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2023-11-21 19:42:16,510 INFO L166 IcfgInterpreter]: Building call graph [2023-11-21 19:42:16,511 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-21 19:42:16,511 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-21 19:42:16,511 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-21 19:42:18,072 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-21 19:42:19,275 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '415#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) |ULTIMATE.start_cstpcpy_#t~mem4#1|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~from#1.base|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= (+ |ULTIMATE.start_cstpcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~from#1.base|) (= (select |#valid| |ULTIMATE.start_cstpcpy_~from#1.base|) 1) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstpcpy_~to#1.base|) |ULTIMATE.start_cstpcpy_~to#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~to#1.base|))' at error location [2023-11-21 19:42:19,276 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-21 19:42:19,276 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 19:42:19,276 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 18 [2023-11-21 19:42:19,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1362198595] [2023-11-21 19:42:19,276 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 19:42:19,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-11-21 19:42:19,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:19,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-11-21 19:42:19,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=78, Invalid=572, Unknown=0, NotChecked=0, Total=650 [2023-11-21 19:42:19,279 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 20 states, 19 states have (on average 1.263157894736842) internal successors, (24), 19 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:20,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:20,078 INFO L93 Difference]: Finished difference Result 18 states and 20 transitions. [2023-11-21 19:42:20,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 19:42:20,079 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.263157894736842) internal successors, (24), 19 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2023-11-21 19:42:20,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:20,079 INFO L225 Difference]: With dead ends: 18 [2023-11-21 19:42:20,079 INFO L226 Difference]: Without dead ends: 18 [2023-11-21 19:42:20,080 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 156 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=158, Invalid=834, Unknown=0, NotChecked=0, Total=992 [2023-11-21 19:42:20,081 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 80 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 12 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:20,081 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 12 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 19:42:20,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2023-11-21 19:42:20,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 14. [2023-11-21 19:42:20,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 12 states have (on average 1.25) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:20,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 15 transitions. [2023-11-21 19:42:20,084 INFO L78 Accepts]: Start accepts. Automaton has 14 states and 15 transitions. Word has length 8 [2023-11-21 19:42:20,084 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:20,084 INFO L495 AbstractCegarLoop]: Abstraction has 14 states and 15 transitions. [2023-11-21 19:42:20,084 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.263157894736842) internal successors, (24), 19 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:20,085 INFO L276 IsEmpty]: Start isEmpty. Operand 14 states and 15 transitions. [2023-11-21 19:42:20,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2023-11-21 19:42:20,085 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:20,085 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 19:42:20,106 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 19:42:20,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:20,295 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:20,296 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:20,296 INFO L85 PathProgramCache]: Analyzing trace with hash 1688577826, now seen corresponding path program 1 times [2023-11-21 19:42:20,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:20,296 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [104301264] [2023-11-21 19:42:20,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:20,297 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:20,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:20,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:20,432 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:20,432 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [104301264] [2023-11-21 19:42:20,432 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [104301264] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 19:42:20,432 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 19:42:20,432 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 19:42:20,433 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738682315] [2023-11-21 19:42:20,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 19:42:20,433 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 19:42:20,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:20,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 19:42:20,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 19:42:20,435 INFO L87 Difference]: Start difference. First operand 14 states and 15 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:20,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:20,454 INFO L93 Difference]: Finished difference Result 13 states and 14 transitions. [2023-11-21 19:42:20,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 19:42:20,457 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2023-11-21 19:42:20,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:20,457 INFO L225 Difference]: With dead ends: 13 [2023-11-21 19:42:20,457 INFO L226 Difference]: Without dead ends: 11 [2023-11-21 19:42:20,458 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 19:42:20,459 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 2 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:20,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 4 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-21 19:42:20,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11 states. [2023-11-21 19:42:20,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11 to 11. [2023-11-21 19:42:20,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 10 states have (on average 1.1) internal successors, (11), 10 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:20,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 11 transitions. [2023-11-21 19:42:20,465 INFO L78 Accepts]: Start accepts. Automaton has 11 states and 11 transitions. Word has length 8 [2023-11-21 19:42:20,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:20,465 INFO L495 AbstractCegarLoop]: Abstraction has 11 states and 11 transitions. [2023-11-21 19:42:20,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:20,465 INFO L276 IsEmpty]: Start isEmpty. Operand 11 states and 11 transitions. [2023-11-21 19:42:20,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2023-11-21 19:42:20,466 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:20,466 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1] [2023-11-21 19:42:20,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-21 19:42:20,471 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:20,472 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:20,472 INFO L85 PathProgramCache]: Analyzing trace with hash -761224029, now seen corresponding path program 2 times [2023-11-21 19:42:20,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:20,472 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000701799] [2023-11-21 19:42:20,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:20,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:20,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:21,065 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:21,065 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:21,066 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000701799] [2023-11-21 19:42:21,066 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000701799] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 19:42:21,066 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [300396183] [2023-11-21 19:42:21,066 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-21 19:42:21,066 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:21,067 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 [2023-11-21 19:42:21,068 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 19:42:21,103 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 19:42:21,162 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2023-11-21 19:42:21,162 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-21 19:42:21,164 INFO L262 TraceCheckSpWp]: Trace formula consists of 114 conjuncts, 56 conjunts are in the unsatisfiable core [2023-11-21 19:42:21,167 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 19:42:21,183 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-11-21 19:42:21,227 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-21 19:42:21,346 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 18 [2023-11-21 19:42:21,476 INFO L349 Elim1Store]: treesize reduction 4, result has 76.5 percent of original size [2023-11-21 19:42:21,477 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 23 [2023-11-21 19:42:21,539 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:21,539 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 19:42:21,827 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 19:42:21,828 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 37 treesize of output 36 [2023-11-21 19:42:21,844 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 34 [2023-11-21 19:42:21,848 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-11-21 19:42:21,861 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 29 [2023-11-21 19:42:21,868 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2023-11-21 19:42:21,965 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:21,966 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [300396183] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 19:42:21,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [688772579] [2023-11-21 19:42:21,968 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2023-11-21 19:42:21,968 INFO L166 IcfgInterpreter]: Building call graph [2023-11-21 19:42:21,969 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-21 19:42:21,969 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-21 19:42:21,969 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-21 19:42:23,310 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-21 19:42:24,421 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '569#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~from#1.base|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~from#1.base|) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~to#1.base|))' at error location [2023-11-21 19:42:24,421 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-21 19:42:24,421 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 19:42:24,422 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 21 [2023-11-21 19:42:24,422 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [14010957] [2023-11-21 19:42:24,422 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 19:42:24,423 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-11-21 19:42:24,423 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:24,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-11-21 19:42:24,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=90, Invalid=662, Unknown=4, NotChecked=0, Total=756 [2023-11-21 19:42:24,424 INFO L87 Difference]: Start difference. First operand 11 states and 11 transitions. Second operand has 22 states, 21 states have (on average 1.3333333333333333) internal successors, (28), 22 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:25,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:25,288 INFO L93 Difference]: Finished difference Result 19 states and 19 transitions. [2023-11-21 19:42:25,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-21 19:42:25,288 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 1.3333333333333333) internal successors, (28), 22 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2023-11-21 19:42:25,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:25,289 INFO L225 Difference]: With dead ends: 19 [2023-11-21 19:42:25,289 INFO L226 Difference]: Without dead ends: 19 [2023-11-21 19:42:25,290 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 249 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=218, Invalid=1184, Unknown=4, NotChecked=0, Total=1406 [2023-11-21 19:42:25,291 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 60 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 12 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:25,292 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 1 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 144 Invalid, 2 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 19:42:25,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-11-21 19:42:25,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 17. [2023-11-21 19:42:25,294 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 16 states have (on average 1.0625) internal successors, (17), 16 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:25,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 17 transitions. [2023-11-21 19:42:25,295 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 17 transitions. Word has length 10 [2023-11-21 19:42:25,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:25,296 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 17 transitions. [2023-11-21 19:42:25,296 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 1.3333333333333333) internal successors, (28), 22 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:25,296 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 17 transitions. [2023-11-21 19:42:25,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-21 19:42:25,297 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:25,297 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1] [2023-11-21 19:42:25,320 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 19:42:25,511 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:25,511 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:25,512 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:25,512 INFO L85 PathProgramCache]: Analyzing trace with hash 1398775427, now seen corresponding path program 3 times [2023-11-21 19:42:25,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:25,512 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361438714] [2023-11-21 19:42:25,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:25,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:25,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:26,315 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:26,316 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:26,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361438714] [2023-11-21 19:42:26,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361438714] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 19:42:26,316 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [489482597] [2023-11-21 19:42:26,316 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-11-21 19:42:26,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:26,316 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 [2023-11-21 19:42:26,318 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 19:42:26,335 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-21 19:42:26,427 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-11-21 19:42:26,427 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-21 19:42:26,430 INFO L262 TraceCheckSpWp]: Trace formula consists of 160 conjuncts, 67 conjunts are in the unsatisfiable core [2023-11-21 19:42:26,433 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 19:42:26,447 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-11-21 19:42:26,453 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-11-21 19:42:26,456 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-11-21 19:42:26,492 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-21 19:42:26,619 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 18 [2023-11-21 19:42:26,771 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 24 [2023-11-21 19:42:26,971 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 41 treesize of output 30 [2023-11-21 19:42:27,174 INFO L349 Elim1Store]: treesize reduction 12, result has 63.6 percent of original size [2023-11-21 19:42:27,175 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 41 treesize of output 39 [2023-11-21 19:42:27,283 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:27,284 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 19:42:28,339 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 19:42:28,340 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 83 treesize of output 60 [2023-11-21 19:42:28,347 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 88 treesize of output 80 [2023-11-21 19:42:28,355 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-11-21 19:42:28,369 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 77 treesize of output 63 [2023-11-21 19:42:28,451 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-11-21 19:42:28,458 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-11-21 19:42:28,540 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:28,540 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [489482597] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 19:42:28,540 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [432245787] [2023-11-21 19:42:28,544 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2023-11-21 19:42:28,544 INFO L166 IcfgInterpreter]: Building call graph [2023-11-21 19:42:28,545 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-21 19:42:28,545 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-21 19:42:28,545 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-21 19:42:30,027 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-21 19:42:31,404 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '754#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~from#1.base|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~from#1.base|) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~to#1.base|))' at error location [2023-11-21 19:42:31,404 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-21 19:42:31,404 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 19:42:31,405 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 12, 14] total 32 [2023-11-21 19:42:31,405 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1784397112] [2023-11-21 19:42:31,405 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 19:42:31,406 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-11-21 19:42:31,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:31,407 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-11-21 19:42:31,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1297, Unknown=28, NotChecked=0, Total=1482 [2023-11-21 19:42:31,409 INFO L87 Difference]: Start difference. First operand 17 states and 17 transitions. Second operand has 33 states, 32 states have (on average 1.4375) internal successors, (46), 33 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:32,941 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse0 (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~from#1.base|) |c_ULTIMATE.start_cstpcpy_~from#1.offset|) 0)) (.cse3 (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse1 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) (.cse2 (select |c_#length| |c_ULTIMATE.start_cstpcpy_~from#1.base|)) (.cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1))) (and (or .cse0 (and (<= 0 .cse1) (<= (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4) .cse2)) (forall ((v_ArrVal_141 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_141) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse3) 0)) (forall ((v_ArrVal_140 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_140) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0))) (<= 5 .cse2) (or .cse0 (and (<= 0 .cse4) (<= .cse3 .cse2))) (= |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4) (or .cse0 (not (= .cse2 .cse4))) (not (= |c_ULTIMATE.start_main_~nondetString~0#1.base| |c_ULTIMATE.start_main_~nondetArea~0#1.base|)) (= |c_ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 3 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) (= |c_ULTIMATE.start_main_~length2~0#1| (+ (select |c_#length| |c_ULTIMATE.start_main_~nondetString~0#1.base|) (* 18446744073709551616 (div |c_ULTIMATE.start_main_~length2~0#1| 18446744073709551616)))) (or .cse0 (and (<= 0 .cse3) (<= .cse1 .cse2)) (forall ((v_ArrVal_141 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_141) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse4) 0))))) is different from false [2023-11-21 19:42:33,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 19:42:33,690 INFO L93 Difference]: Finished difference Result 31 states and 31 transitions. [2023-11-21 19:42:33,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-11-21 19:42:33,691 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 1.4375) internal successors, (46), 33 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-21 19:42:33,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 19:42:33,692 INFO L225 Difference]: With dead ends: 31 [2023-11-21 19:42:33,692 INFO L226 Difference]: Without dead ends: 31 [2023-11-21 19:42:33,694 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 54 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 567 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=370, Invalid=2559, Unknown=45, NotChecked=106, Total=3080 [2023-11-21 19:42:33,695 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 30 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 327 mSolverCounterSat, 16 mSolverCounterUnsat, 14 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 385 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 327 IncrementalHoareTripleChecker+Invalid, 14 IncrementalHoareTripleChecker+Unknown, 28 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 19:42:33,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 3 Invalid, 385 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 327 Invalid, 14 Unknown, 28 Unchecked, 0.5s Time] [2023-11-21 19:42:33,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2023-11-21 19:42:33,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 29. [2023-11-21 19:42:33,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 28 states have (on average 1.0357142857142858) internal successors, (29), 28 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:33,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 29 transitions. [2023-11-21 19:42:33,700 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 29 transitions. Word has length 16 [2023-11-21 19:42:33,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 19:42:33,701 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 29 transitions. [2023-11-21 19:42:33,701 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 1.4375) internal successors, (46), 33 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:33,701 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 29 transitions. [2023-11-21 19:42:33,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-21 19:42:33,702 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 19:42:33,702 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 1, 1, 1, 1] [2023-11-21 19:42:33,724 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-11-21 19:42:33,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-21 19:42:33,908 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 4 more)] === [2023-11-21 19:42:33,908 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 19:42:33,908 INFO L85 PathProgramCache]: Analyzing trace with hash 2120931907, now seen corresponding path program 4 times [2023-11-21 19:42:33,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-21 19:42:33,909 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1117590769] [2023-11-21 19:42:33,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 19:42:33,909 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 19:42:33,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:35,478 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:35,478 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-21 19:42:35,478 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1117590769] [2023-11-21 19:42:35,479 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1117590769] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 19:42:35,479 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2133739723] [2023-11-21 19:42:35,479 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-11-21 19:42:35,479 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 19:42:35,479 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 [2023-11-21 19:42:35,480 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 19:42:35,486 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_321c9e25-f4be-44ec-bb9d-38d1b08fa8f0/bin/utaipan-verify-QoSU8krkJ5/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-21 19:42:35,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 19:42:35,630 INFO L262 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 105 conjunts are in the unsatisfiable core [2023-11-21 19:42:35,635 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 19:42:35,643 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-11-21 19:42:35,687 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2023-11-21 19:42:35,901 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 19 [2023-11-21 19:42:36,164 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 36 treesize of output 27 [2023-11-21 19:42:36,470 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 46 treesize of output 35 [2023-11-21 19:42:36,805 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 43 [2023-11-21 19:42:37,179 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 66 treesize of output 51 [2023-11-21 19:42:37,617 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 76 treesize of output 59 [2023-11-21 19:42:38,079 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 86 treesize of output 67 [2023-11-21 19:42:38,412 INFO L349 Elim1Store]: treesize reduction 28, result has 68.5 percent of original size [2023-11-21 19:42:38,413 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 8 case distinctions, treesize of input 88 treesize of output 95 [2023-11-21 19:42:38,432 WARN L667 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2023-11-21 19:42:38,518 WARN L667 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2023-11-21 19:42:38,733 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:38,733 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 19:42:43,526 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 19:42:43,527 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 175 treesize of output 108 [2023-11-21 19:42:43,552 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 188 treesize of output 172 [2023-11-21 19:42:43,592 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 225 treesize of output 195 [2023-11-21 19:42:43,630 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,657 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,685 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,712 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2023-11-21 19:42:43,738 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,761 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,782 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,801 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 19:42:43,918 WARN L667 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2023-11-21 19:42:44,085 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 19:42:44,085 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2133739723] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 19:42:44,086 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1554039968] [2023-11-21 19:42:44,088 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2023-11-21 19:42:44,089 INFO L166 IcfgInterpreter]: Building call graph [2023-11-21 19:42:44,089 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-21 19:42:44,089 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-21 19:42:44,090 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-21 19:42:45,442 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-21 19:42:47,348 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1072#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~from#1.base|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstpcpy_~from#1.base|) |ULTIMATE.start_cstpcpy_~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstpcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_cstpcpy_#in~from#1.offset| 0) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~from#1.base|) (= |ULTIMATE.start_cstpcpy_#in~to#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 2 |ULTIMATE.start_cstpcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstpcpy_~to#1.base|))' at error location [2023-11-21 19:42:47,349 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-21 19:42:47,349 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 19:42:47,349 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 26] total 55 [2023-11-21 19:42:47,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1662161292] [2023-11-21 19:42:47,350 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 19:42:47,350 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2023-11-21 19:42:47,351 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-21 19:42:47,352 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2023-11-21 19:42:47,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=373, Invalid=3256, Unknown=153, NotChecked=0, Total=3782 [2023-11-21 19:42:47,355 INFO L87 Difference]: Start difference. First operand 29 states and 29 transitions. Second operand has 56 states, 55 states have (on average 1.490909090909091) internal successors, (82), 56 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 19:42:51,724 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse37 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 8)) (.cse4 (select |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~from#1.base|)) (.cse8 (div |c_ULTIMATE.start_main_~length2~0#1| 18446744073709551616)) (.cse46 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 4)) (.cse11 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 1)) (.cse48 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 3)) (.cse47 (+ 2 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse45 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 6)) (.cse44 (+ 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) (.cse23 (select |c_#length| |c_ULTIMATE.start_cstpcpy_~from#1.base|)) (.cse49 (+ 5 |c_ULTIMATE.start_cstpcpy_~from#1.offset|))) (let ((.cse17 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse49) 0))) (.cse18 (and (<= 0 .cse45) (<= .cse44 .cse23))) (.cse19 (forall ((v_ArrVal_192 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_192) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse47) 0))) (.cse20 (forall ((v_ArrVal_193 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_193) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse48) 0))) (.cse21 (forall ((v_ArrVal_191 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_191) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse22 (forall ((v_ArrVal_194 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_194) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse46) 0))) (.cse9 (select |c_#length| |c_ULTIMATE.start_main_~nondetString~0#1.base|)) (.cse10 (* 18446744073709551616 .cse8)) (.cse1 (and (<= 0 .cse48) (<= .cse46 .cse23))) (.cse2 (forall ((v_ArrVal_194 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_194) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse3 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse47) 0))) (.cse12 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse46) 0))) (.cse13 (and (<= .cse45 .cse23) (<= 0 .cse49))) (.cse14 (forall ((v_ArrVal_194 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_194) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse48) 0))) (.cse15 (forall ((v_ArrVal_192 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_192) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse16 (forall ((v_ArrVal_193 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_193) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse47) 0))) (.cse5 (= (select .cse4 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) 0)) (.cse24 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse48) 0))) (.cse25 (and (<= 0 .cse46) (<= .cse49 .cse23))) (.cse26 (forall ((v_ArrVal_193 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_193) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse27 (forall ((v_ArrVal_194 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_194) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse47) 0))) (.cse35 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse44) 0))) (.cse36 (forall ((v_ArrVal_191 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_191) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse48) 0))) (.cse38 (forall ((v_ArrVal_190 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_190) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse47) 0))) (.cse39 (forall ((v_ArrVal_189 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_189) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse40 (forall ((v_ArrVal_192 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_192) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse46) 0))) (.cse41 (forall ((v_ArrVal_194 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_194) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse45) 0))) (.cse42 (forall ((v_ArrVal_193 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_193) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse49) 0))) (.cse6 (and (<= 0 .cse47) (<= .cse48 .cse23))) (.cse7 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse0 (= |c_ULTIMATE.start_cstpcpy_#t~mem4#1| 0)) (.cse28 (forall ((v_ArrVal_194 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_194) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse49) 0))) (.cse29 (forall ((v_ArrVal_190 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_190) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse11) 0))) (.cse30 (forall ((v_ArrVal_192 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_192) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse48) 0))) (.cse31 (forall ((v_ArrVal_191 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_191) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse47)))) (.cse32 (forall ((v_ArrVal_193 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_193) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse46) 0))) (.cse33 (forall ((v_ArrVal_195 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstpcpy_~to#1.base| v_ArrVal_195) |c_ULTIMATE.start_cstpcpy_~from#1.base|) .cse45) 0))) (.cse34 (and (<= 0 .cse44) (<= .cse37 .cse23)))) (and (or .cse0 .cse1 .cse2 .cse3) (not (= (select .cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| (- 5))) 0)) (or .cse5 .cse6 .cse7) (not (= (select .cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| (- 3))) 0)) (= 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) (or (< .cse8 0) (< (+ .cse9 .cse10) (+ |c_ULTIMATE.start_main_~length2~0#1| 1))) (not (= (select .cse4 (+ (- 2) |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) (or (= (select .cse4 .cse11) 0) .cse0 .cse6) (not (= (select .cse4 (+ (- 1) |c_ULTIMATE.start_cstpcpy_~from#1.offset|)) 0)) (or .cse5 .cse12 .cse13 .cse14 .cse15 .cse16) (or .cse5 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22) (or (< 8 .cse23) (and (= .cse23 8) .cse0)) (or .cse0 .cse24 .cse25 .cse26 .cse27) (or .cse5 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34) (or .cse35 .cse5 .cse36 (< .cse37 .cse23) .cse38 (< |c_ULTIMATE.start_cstpcpy_~from#1.offset| 0) .cse39 .cse40 .cse41 .cse42) (<= 7 |c_ULTIMATE.start_cstpcpy_~from#1.offset|) (or .cse0 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22) (not (= (select .cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| (- 7))) 0)) (exists ((|ULTIMATE.start_main_~nondetString~0#1.offset| Int) (|ULTIMATE.start_main_~length2~0#1| Int)) (let ((.cse43 (+ |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|))) (and (<= .cse43 .cse23) (= (select .cse4 (+ (- 1) |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|)) 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 .cse43) (<= |c_ULTIMATE.start_cstpcpy_~from#1.offset| (+ 7 |ULTIMATE.start_main_~nondetString~0#1.offset|))))) (or (< 0 (+ .cse8 1)) (< |c_ULTIMATE.start_main_~length2~0#1| (+ .cse9 .cse10 1))) (or .cse5 .cse1 .cse2 .cse3) (not (= (select .cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| (- 4))) 0)) (not (= (select .cse4 (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| (- 6))) 0)) (or .cse0 .cse12 .cse13 .cse14 .cse15 .cse16) (or .cse5 .cse24 .cse25 .cse26 .cse27) (or .cse35 .cse0 .cse36 (and (<= (+ |c_ULTIMATE.start_cstpcpy_~from#1.offset| 9) .cse23) (<= 0 .cse37)) .cse38 .cse39 .cse40 .cse41 .cse42) (not (= |c_ULTIMATE.start_main_~nondetString~0#1.base| |c_ULTIMATE.start_main_~nondetArea~0#1.base|)) (or .cse0 .cse6 .cse7) (= |c_ULTIMATE.start_main_~nondetString~0#1.offset| 0) (or .cse0 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34)))) is different from false