./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4b6873ae1a0d665798beb3dd9c0c48e89806da7dd46f1d2066800a52e0a2aa51 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-12-02 18:48:22,434 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-12-02 18:48:22,503 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2023-12-02 18:48:22,509 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-12-02 18:48:22,510 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-12-02 18:48:22,536 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-12-02 18:48:22,536 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-12-02 18:48:22,537 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-12-02 18:48:22,538 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-12-02 18:48:22,538 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-12-02 18:48:22,539 INFO L153 SettingsManager]: * User list type=DISABLED [2023-12-02 18:48:22,540 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-12-02 18:48:22,540 INFO L153 SettingsManager]: * Explicit value domain=true [2023-12-02 18:48:22,541 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-12-02 18:48:22,541 INFO L153 SettingsManager]: * Octagon Domain=false [2023-12-02 18:48:22,542 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-12-02 18:48:22,543 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-12-02 18:48:22,543 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-12-02 18:48:22,544 INFO L153 SettingsManager]: * Interval Domain=false [2023-12-02 18:48:22,544 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-12-02 18:48:22,545 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-12-02 18:48:22,545 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-12-02 18:48:22,546 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-12-02 18:48:22,546 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-12-02 18:48:22,547 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-12-02 18:48:22,547 INFO L153 SettingsManager]: * sizeof long=4 [2023-12-02 18:48:22,548 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-12-02 18:48:22,548 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-12-02 18:48:22,548 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-12-02 18:48:22,549 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-12-02 18:48:22,549 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2023-12-02 18:48:22,550 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-12-02 18:48:22,550 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-12-02 18:48:22,550 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-12-02 18:48:22,551 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-12-02 18:48:22,551 INFO L153 SettingsManager]: * sizeof long double=12 [2023-12-02 18:48:22,551 INFO L153 SettingsManager]: * Use constant arrays=true [2023-12-02 18:48:22,551 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-12-02 18:48:22,552 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-12-02 18:48:22,552 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-12-02 18:48:22,552 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 18:48:22,553 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-12-02 18:48:22,553 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-12-02 18:48:22,553 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-12-02 18:48:22,553 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-12-02 18:48:22,553 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-12-02 18:48:22,554 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-12-02 18:48:22,554 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-12-02 18:48:22,554 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4b6873ae1a0d665798beb3dd9c0c48e89806da7dd46f1d2066800a52e0a2aa51 [2023-12-02 18:48:22,799 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-12-02 18:48:22,822 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-12-02 18:48:22,825 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-12-02 18:48:22,826 INFO L270 PluginConnector]: Initializing CDTParser... [2023-12-02 18:48:22,827 INFO L274 PluginConnector]: CDTParser initialized [2023-12-02 18:48:22,828 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i [2023-12-02 18:48:25,630 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-12-02 18:48:25,874 INFO L384 CDTParser]: Found 1 translation units. [2023-12-02 18:48:25,875 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i [2023-12-02 18:48:25,888 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/data/f134e1637/82e12def56d146fbb4c6d60b7e286f91/FLAGf97e5c5cd [2023-12-02 18:48:25,900 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/data/f134e1637/82e12def56d146fbb4c6d60b7e286f91 [2023-12-02 18:48:25,902 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-12-02 18:48:25,903 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-12-02 18:48:25,904 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-12-02 18:48:25,904 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-12-02 18:48:25,909 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-12-02 18:48:25,910 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 06:48:25" (1/1) ... [2023-12-02 18:48:25,911 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4d495f31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:25, skipping insertion in model container [2023-12-02 18:48:25,912 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.12 06:48:25" (1/1) ... [2023-12-02 18:48:25,953 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-12-02 18:48:26,197 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 18:48:26,210 INFO L202 MainTranslator]: Completed pre-run [2023-12-02 18:48:26,247 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-12-02 18:48:26,277 INFO L206 MainTranslator]: Completed translation [2023-12-02 18:48:26,277 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26 WrapperNode [2023-12-02 18:48:26,277 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-12-02 18:48:26,278 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-12-02 18:48:26,279 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-12-02 18:48:26,279 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-12-02 18:48:26,287 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,299 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,317 INFO L138 Inliner]: procedures = 117, calls = 13, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 68 [2023-12-02 18:48:26,317 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-12-02 18:48:26,318 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-12-02 18:48:26,318 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-12-02 18:48:26,318 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-12-02 18:48:26,326 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,326 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,328 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,329 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,334 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,336 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,337 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,338 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,341 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-12-02 18:48:26,341 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-12-02 18:48:26,342 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-12-02 18:48:26,342 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-12-02 18:48:26,342 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (1/1) ... [2023-12-02 18:48:26,347 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-12-02 18:48:26,358 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:26,370 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-12-02 18:48:26,377 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-12-02 18:48:26,412 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-12-02 18:48:26,412 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-12-02 18:48:26,412 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-12-02 18:48:26,412 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-12-02 18:48:26,412 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-12-02 18:48:26,413 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-12-02 18:48:26,531 INFO L241 CfgBuilder]: Building ICFG [2023-12-02 18:48:26,534 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-12-02 18:48:26,682 INFO L282 CfgBuilder]: Performing block encoding [2023-12-02 18:48:26,732 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-12-02 18:48:26,732 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-12-02 18:48:26,734 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 06:48:26 BoogieIcfgContainer [2023-12-02 18:48:26,734 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-12-02 18:48:26,737 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-12-02 18:48:26,737 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-12-02 18:48:26,741 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-12-02 18:48:26,741 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.12 06:48:25" (1/3) ... [2023-12-02 18:48:26,742 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6a5e2dba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 06:48:26, skipping insertion in model container [2023-12-02 18:48:26,742 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.12 06:48:26" (2/3) ... [2023-12-02 18:48:26,743 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6a5e2dba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.12 06:48:26, skipping insertion in model container [2023-12-02 18:48:26,743 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.12 06:48:26" (3/3) ... [2023-12-02 18:48:26,744 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrcpy-alloca-2.i [2023-12-02 18:48:26,764 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-12-02 18:48:26,765 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 9 error locations. [2023-12-02 18:48:26,813 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-12-02 18:48:26,820 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2299ae08, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-12-02 18:48:26,820 INFO L358 AbstractCegarLoop]: Starting to check reachability of 9 error locations. [2023-12-02 18:48:26,824 INFO L276 IsEmpty]: Start isEmpty. Operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:26,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-12-02 18:48:26,830 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:26,831 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-12-02 18:48:26,831 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:26,837 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:26,837 INFO L85 PathProgramCache]: Analyzing trace with hash 107263, now seen corresponding path program 1 times [2023-12-02 18:48:26,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:26,848 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [974852425] [2023-12-02 18:48:26,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:26,849 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:26,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:26,997 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:26,998 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:26,998 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [974852425] [2023-12-02 18:48:26,999 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [974852425] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:26,999 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:26,999 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2023-12-02 18:48:27,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255258404] [2023-12-02 18:48:27,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:27,006 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 18:48:27,007 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:27,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 18:48:27,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:48:27,038 INFO L87 Difference]: Start difference. First operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:27,094 INFO L93 Difference]: Finished difference Result 21 states and 23 transitions. [2023-12-02 18:48:27,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 18:48:27,097 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-12-02 18:48:27,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:27,125 INFO L225 Difference]: With dead ends: 21 [2023-12-02 18:48:27,125 INFO L226 Difference]: Without dead ends: 19 [2023-12-02 18:48:27,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:48:27,131 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:27,132 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 20 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:27,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-12-02 18:48:27,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2023-12-02 18:48:27,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 10 states have (on average 2.0) internal successors, (20), 18 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2023-12-02 18:48:27,173 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 3 [2023-12-02 18:48:27,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:27,173 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2023-12-02 18:48:27,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,174 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2023-12-02 18:48:27,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-12-02 18:48:27,174 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:27,174 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-12-02 18:48:27,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-12-02 18:48:27,175 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:27,176 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:27,176 INFO L85 PathProgramCache]: Analyzing trace with hash 3325926, now seen corresponding path program 1 times [2023-12-02 18:48:27,176 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:27,177 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960780115] [2023-12-02 18:48:27,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:27,177 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:27,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:27,299 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:27,299 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:27,299 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960780115] [2023-12-02 18:48:27,300 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960780115] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:27,300 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:27,300 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 18:48:27,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [905319809] [2023-12-02 18:48:27,301 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:27,302 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 18:48:27,302 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:27,303 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 18:48:27,303 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:48:27,303 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:27,328 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2023-12-02 18:48:27,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 18:48:27,329 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-12-02 18:48:27,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:27,330 INFO L225 Difference]: With dead ends: 17 [2023-12-02 18:48:27,330 INFO L226 Difference]: Without dead ends: 17 [2023-12-02 18:48:27,330 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:48:27,332 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 13 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:27,333 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 6 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:27,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2023-12-02 18:48:27,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2023-12-02 18:48:27,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 10 states have (on average 1.8) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2023-12-02 18:48:27,337 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 4 [2023-12-02 18:48:27,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:27,337 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2023-12-02 18:48:27,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,338 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2023-12-02 18:48:27,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-12-02 18:48:27,338 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:27,338 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-12-02 18:48:27,339 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-12-02 18:48:27,339 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:27,340 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:27,340 INFO L85 PathProgramCache]: Analyzing trace with hash 3325927, now seen corresponding path program 1 times [2023-12-02 18:48:27,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:27,340 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1593376380] [2023-12-02 18:48:27,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:27,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:27,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:27,639 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:27,639 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:27,640 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1593376380] [2023-12-02 18:48:27,640 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1593376380] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:27,640 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:27,640 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 18:48:27,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184852195] [2023-12-02 18:48:27,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:27,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 18:48:27,641 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:27,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 18:48:27,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:48:27,642 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:27,717 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2023-12-02 18:48:27,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 18:48:27,718 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-12-02 18:48:27,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:27,718 INFO L225 Difference]: With dead ends: 19 [2023-12-02 18:48:27,719 INFO L226 Difference]: Without dead ends: 19 [2023-12-02 18:48:27,719 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2023-12-02 18:48:27,720 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 19 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:27,721 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 17 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:27,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-12-02 18:48:27,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2023-12-02 18:48:27,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 12 states have (on average 1.75) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2023-12-02 18:48:27,725 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 4 [2023-12-02 18:48:27,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:27,725 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2023-12-02 18:48:27,725 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,726 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2023-12-02 18:48:27,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-12-02 18:48:27,726 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:27,726 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-12-02 18:48:27,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-12-02 18:48:27,727 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:27,727 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:27,727 INFO L85 PathProgramCache]: Analyzing trace with hash 3327456, now seen corresponding path program 1 times [2023-12-02 18:48:27,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:27,728 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947489100] [2023-12-02 18:48:27,728 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:27,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:27,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:27,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:27,921 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:27,921 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947489100] [2023-12-02 18:48:27,921 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1947489100] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:27,922 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:27,922 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 18:48:27,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837188559] [2023-12-02 18:48:27,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:27,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 18:48:27,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:27,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 18:48:27,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:48:27,923 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:27,976 INFO L93 Difference]: Finished difference Result 30 states and 32 transitions. [2023-12-02 18:48:27,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 18:48:27,977 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-12-02 18:48:27,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:27,977 INFO L225 Difference]: With dead ends: 30 [2023-12-02 18:48:27,977 INFO L226 Difference]: Without dead ends: 30 [2023-12-02 18:48:27,978 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:48:27,979 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 40 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:27,980 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 9 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:27,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2023-12-02 18:48:27,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 20. [2023-12-02 18:48:27,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 13 states have (on average 1.6923076923076923) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2023-12-02 18:48:27,984 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 4 [2023-12-02 18:48:27,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:27,984 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2023-12-02 18:48:27,985 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:27,985 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2023-12-02 18:48:27,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2023-12-02 18:48:27,985 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:27,985 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2023-12-02 18:48:27,986 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-12-02 18:48:27,986 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:27,986 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:27,987 INFO L85 PathProgramCache]: Analyzing trace with hash 103152174, now seen corresponding path program 1 times [2023-12-02 18:48:27,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:27,987 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208759310] [2023-12-02 18:48:27,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:27,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:27,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:28,022 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:28,023 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:28,023 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208759310] [2023-12-02 18:48:28,023 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [208759310] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:28,023 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:28,023 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 18:48:28,023 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57963263] [2023-12-02 18:48:28,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:28,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-12-02 18:48:28,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:28,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-12-02 18:48:28,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:48:28,025 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:28,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:28,047 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2023-12-02 18:48:28,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-12-02 18:48:28,048 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2023-12-02 18:48:28,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:28,048 INFO L225 Difference]: With dead ends: 19 [2023-12-02 18:48:28,048 INFO L226 Difference]: Without dead ends: 19 [2023-12-02 18:48:28,049 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-12-02 18:48:28,055 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 6 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:28,056 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 10 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:28,057 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-12-02 18:48:28,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2023-12-02 18:48:28,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 13 states have (on average 1.6153846153846154) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:28,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2023-12-02 18:48:28,059 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 5 [2023-12-02 18:48:28,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:28,060 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2023-12-02 18:48:28,060 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:28,060 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2023-12-02 18:48:28,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2023-12-02 18:48:28,060 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:28,061 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2023-12-02 18:48:28,061 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-12-02 18:48:28,061 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:28,062 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:28,062 INFO L85 PathProgramCache]: Analyzing trace with hash 103152175, now seen corresponding path program 1 times [2023-12-02 18:48:28,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:28,062 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [449994132] [2023-12-02 18:48:28,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:28,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:28,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:28,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:28,173 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:28,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [449994132] [2023-12-02 18:48:28,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [449994132] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:28,173 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:28,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 18:48:28,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1871096581] [2023-12-02 18:48:28,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:28,174 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 18:48:28,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:28,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 18:48:28,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 18:48:28,175 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:28,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:28,212 INFO L93 Difference]: Finished difference Result 25 states and 28 transitions. [2023-12-02 18:48:28,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 18:48:28,213 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2023-12-02 18:48:28,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:28,214 INFO L225 Difference]: With dead ends: 25 [2023-12-02 18:48:28,214 INFO L226 Difference]: Without dead ends: 25 [2023-12-02 18:48:28,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:48:28,215 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 26 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:28,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 10 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:28,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2023-12-02 18:48:28,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 20. [2023-12-02 18:48:28,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 14 states have (on average 1.5714285714285714) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:28,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2023-12-02 18:48:28,220 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 5 [2023-12-02 18:48:28,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:28,220 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2023-12-02 18:48:28,220 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:28,221 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2023-12-02 18:48:28,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2023-12-02 18:48:28,221 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:28,221 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2023-12-02 18:48:28,221 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-12-02 18:48:28,222 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:28,222 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:28,222 INFO L85 PathProgramCache]: Analyzing trace with hash -1098708298, now seen corresponding path program 1 times [2023-12-02 18:48:28,222 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:28,222 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237443313] [2023-12-02 18:48:28,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:28,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:28,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:28,447 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:28,448 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:28,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237443313] [2023-12-02 18:48:28,448 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237443313] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:28,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [781100375] [2023-12-02 18:48:28,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:28,448 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:28,449 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:28,452 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:28,456 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-12-02 18:48:28,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:28,531 INFO L262 TraceCheckSpWp]: Trace formula consists of 62 conjuncts, 17 conjunts are in the unsatisfiable core [2023-12-02 18:48:28,536 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:28,645 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2023-12-02 18:48:28,653 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:48:28,812 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:28,812 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:28,996 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:28,997 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [781100375] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:28,997 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [541234783] [2023-12-02 18:48:29,019 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2023-12-02 18:48:29,019 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:29,022 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:29,027 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:29,027 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:29,693 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:30,222 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '339#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|) |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (or (and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 127) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 3 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647)) (and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 127) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 2 |ULTIMATE.start_main_~length1~0#1|))) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0))' at error location [2023-12-02 18:48:30,223 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:30,223 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:30,223 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2023-12-02 18:48:30,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [650047601] [2023-12-02 18:48:30,223 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:30,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2023-12-02 18:48:30,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:30,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2023-12-02 18:48:30,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=246, Unknown=0, NotChecked=0, Total=306 [2023-12-02 18:48:30,225 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:30,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:30,537 INFO L93 Difference]: Finished difference Result 20 states and 23 transitions. [2023-12-02 18:48:30,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 18:48:30,538 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2023-12-02 18:48:30,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:30,538 INFO L225 Difference]: With dead ends: 20 [2023-12-02 18:48:30,538 INFO L226 Difference]: Without dead ends: 20 [2023-12-02 18:48:30,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 76 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=128, Invalid=424, Unknown=0, NotChecked=0, Total=552 [2023-12-02 18:48:30,539 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 51 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:30,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 28 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:30,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2023-12-02 18:48:30,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 18. [2023-12-02 18:48:30,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 13 states have (on average 1.5384615384615385) internal successors, (20), 17 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:30,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 20 transitions. [2023-12-02 18:48:30,543 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 20 transitions. Word has length 6 [2023-12-02 18:48:30,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:30,543 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 20 transitions. [2023-12-02 18:48:30,544 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:30,544 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 20 transitions. [2023-12-02 18:48:30,544 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2023-12-02 18:48:30,544 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:30,544 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2023-12-02 18:48:30,553 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-12-02 18:48:30,744 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:30,745 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:30,745 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:30,745 INFO L85 PathProgramCache]: Analyzing trace with hash -1098706769, now seen corresponding path program 1 times [2023-12-02 18:48:30,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:30,746 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [949396192] [2023-12-02 18:48:30,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:30,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:30,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:30,985 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:30,986 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:30,986 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [949396192] [2023-12-02 18:48:30,986 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [949396192] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:30,986 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [883268912] [2023-12-02 18:48:30,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:30,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:30,987 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:30,988 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:30,990 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-12-02 18:48:31,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:31,050 INFO L262 TraceCheckSpWp]: Trace formula consists of 60 conjuncts, 15 conjunts are in the unsatisfiable core [2023-12-02 18:48:31,052 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:31,062 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2023-12-02 18:48:31,069 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:48:31,201 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:31,201 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:31,332 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:31,332 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [883268912] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:31,333 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1137673997] [2023-12-02 18:48:31,335 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2023-12-02 18:48:31,335 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:31,335 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:31,335 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:31,336 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:31,771 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:32,154 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '437#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (or (< |ULTIMATE.start_main_~length2~0#1| 1) (< (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|) |ULTIMATE.start_main_~length2~0#1|)) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0))' at error location [2023-12-02 18:48:32,154 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:32,155 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:32,155 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 13 [2023-12-02 18:48:32,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960947929] [2023-12-02 18:48:32,155 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:32,156 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2023-12-02 18:48:32,156 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:32,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2023-12-02 18:48:32,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=272, Unknown=0, NotChecked=0, Total=342 [2023-12-02 18:48:32,157 INFO L87 Difference]: Start difference. First operand 18 states and 20 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:32,396 INFO L93 Difference]: Finished difference Result 28 states and 30 transitions. [2023-12-02 18:48:32,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-12-02 18:48:32,403 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2023-12-02 18:48:32,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:32,403 INFO L225 Difference]: With dead ends: 28 [2023-12-02 18:48:32,403 INFO L226 Difference]: Without dead ends: 28 [2023-12-02 18:48:32,404 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 107 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=103, Invalid=403, Unknown=0, NotChecked=0, Total=506 [2023-12-02 18:48:32,405 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 39 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:32,405 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 28 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:32,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2023-12-02 18:48:32,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 15. [2023-12-02 18:48:32,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 11 states have (on average 1.4545454545454546) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2023-12-02 18:48:32,408 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 6 [2023-12-02 18:48:32,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:32,409 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2023-12-02 18:48:32,409 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,409 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2023-12-02 18:48:32,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2023-12-02 18:48:32,409 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:32,409 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2023-12-02 18:48:32,415 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-12-02 18:48:32,610 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2023-12-02 18:48:32,610 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:32,610 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:32,611 INFO L85 PathProgramCache]: Analyzing trace with hash -1097249884, now seen corresponding path program 1 times [2023-12-02 18:48:32,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:32,611 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [442916345] [2023-12-02 18:48:32,611 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:32,611 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:32,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:32,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:32,693 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:32,694 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [442916345] [2023-12-02 18:48:32,694 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [442916345] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:32,694 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:32,694 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 18:48:32,694 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706072318] [2023-12-02 18:48:32,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:32,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 18:48:32,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:32,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 18:48:32,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 18:48:32,696 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:32,726 INFO L93 Difference]: Finished difference Result 14 states and 15 transitions. [2023-12-02 18:48:32,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 18:48:32,727 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2023-12-02 18:48:32,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:32,728 INFO L225 Difference]: With dead ends: 14 [2023-12-02 18:48:32,728 INFO L226 Difference]: Without dead ends: 14 [2023-12-02 18:48:32,728 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:48:32,729 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 13 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:32,729 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 6 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:32,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14 states. [2023-12-02 18:48:32,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14 to 14. [2023-12-02 18:48:32,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 11 states have (on average 1.3636363636363635) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 15 transitions. [2023-12-02 18:48:32,732 INFO L78 Accepts]: Start accepts. Automaton has 14 states and 15 transitions. Word has length 6 [2023-12-02 18:48:32,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:32,732 INFO L495 AbstractCegarLoop]: Abstraction has 14 states and 15 transitions. [2023-12-02 18:48:32,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,733 INFO L276 IsEmpty]: Start isEmpty. Operand 14 states and 15 transitions. [2023-12-02 18:48:32,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2023-12-02 18:48:32,733 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:32,733 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2023-12-02 18:48:32,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-12-02 18:48:32,733 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:32,734 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:32,734 INFO L85 PathProgramCache]: Analyzing trace with hash -1097249883, now seen corresponding path program 1 times [2023-12-02 18:48:32,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:32,734 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [216716697] [2023-12-02 18:48:32,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:32,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:32,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:32,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:32,890 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:32,890 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [216716697] [2023-12-02 18:48:32,890 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [216716697] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:32,890 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:32,890 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-12-02 18:48:32,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773023489] [2023-12-02 18:48:32,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:32,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-12-02 18:48:32,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:32,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-12-02 18:48:32,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-12-02 18:48:32,892 INFO L87 Difference]: Start difference. First operand 14 states and 15 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:32,942 INFO L93 Difference]: Finished difference Result 17 states and 19 transitions. [2023-12-02 18:48:32,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-12-02 18:48:32,942 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2023-12-02 18:48:32,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:32,944 INFO L225 Difference]: With dead ends: 17 [2023-12-02 18:48:32,944 INFO L226 Difference]: Without dead ends: 17 [2023-12-02 18:48:32,944 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-12-02 18:48:32,945 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 36 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:32,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 6 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:32,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2023-12-02 18:48:32,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 15. [2023-12-02 18:48:32,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 12 states have (on average 1.3333333333333333) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2023-12-02 18:48:32,948 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 6 [2023-12-02 18:48:32,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:32,948 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2023-12-02 18:48:32,948 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:32,948 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2023-12-02 18:48:32,949 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2023-12-02 18:48:32,949 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:32,949 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:48:32,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-12-02 18:48:32,949 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:32,950 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:32,950 INFO L85 PathProgramCache]: Analyzing trace with hash 2104817579, now seen corresponding path program 1 times [2023-12-02 18:48:32,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:32,950 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824048305] [2023-12-02 18:48:32,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:32,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:32,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:33,095 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:33,096 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:33,096 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824048305] [2023-12-02 18:48:33,096 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1824048305] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:33,096 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:33,096 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-12-02 18:48:33,096 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1546133213] [2023-12-02 18:48:33,096 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:33,096 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-12-02 18:48:33,097 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:33,097 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-12-02 18:48:33,097 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-12-02 18:48:33,097 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:33,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:33,176 INFO L93 Difference]: Finished difference Result 24 states and 25 transitions. [2023-12-02 18:48:33,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-12-02 18:48:33,178 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2023-12-02 18:48:33,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:33,178 INFO L225 Difference]: With dead ends: 24 [2023-12-02 18:48:33,178 INFO L226 Difference]: Without dead ends: 24 [2023-12-02 18:48:33,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-12-02 18:48:33,179 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 14 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:33,179 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 24 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:33,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2023-12-02 18:48:33,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 20. [2023-12-02 18:48:33,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:33,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2023-12-02 18:48:33,182 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 8 [2023-12-02 18:48:33,182 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:33,182 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2023-12-02 18:48:33,183 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:33,183 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2023-12-02 18:48:33,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-12-02 18:48:33,183 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:33,183 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:48:33,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-12-02 18:48:33,183 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:33,184 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:33,184 INFO L85 PathProgramCache]: Analyzing trace with hash 824819082, now seen corresponding path program 1 times [2023-12-02 18:48:33,184 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:33,184 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [298850823] [2023-12-02 18:48:33,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:33,184 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:33,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:33,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:33,267 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:33,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [298850823] [2023-12-02 18:48:33,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [298850823] provided 1 perfect and 0 imperfect interpolant sequences [2023-12-02 18:48:33,267 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-12-02 18:48:33,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-12-02 18:48:33,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2062977405] [2023-12-02 18:48:33,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-12-02 18:48:33,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-12-02 18:48:33,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:33,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-12-02 18:48:33,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 18:48:33,268 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:33,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:33,287 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2023-12-02 18:48:33,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-12-02 18:48:33,287 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-12-02 18:48:33,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:33,288 INFO L225 Difference]: With dead ends: 19 [2023-12-02 18:48:33,288 INFO L226 Difference]: Without dead ends: 13 [2023-12-02 18:48:33,288 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-12-02 18:48:33,289 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 5 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:33,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 8 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-12-02 18:48:33,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13 states. [2023-12-02 18:48:33,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13 to 13. [2023-12-02 18:48:33,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 11 states have (on average 1.2727272727272727) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:33,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 14 transitions. [2023-12-02 18:48:33,291 INFO L78 Accepts]: Start accepts. Automaton has 13 states and 14 transitions. Word has length 9 [2023-12-02 18:48:33,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:33,291 INFO L495 AbstractCegarLoop]: Abstraction has 13 states and 14 transitions. [2023-12-02 18:48:33,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:33,292 INFO L276 IsEmpty]: Start isEmpty. Operand 13 states and 14 transitions. [2023-12-02 18:48:33,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2023-12-02 18:48:33,292 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:33,292 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:48:33,292 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-12-02 18:48:33,292 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:33,293 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:33,293 INFO L85 PathProgramCache]: Analyzing trace with hash -1309326598, now seen corresponding path program 1 times [2023-12-02 18:48:33,293 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:33,293 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193427905] [2023-12-02 18:48:33,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:33,293 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:33,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:33,465 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:33,466 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:33,466 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1193427905] [2023-12-02 18:48:33,466 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1193427905] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:33,466 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [140489728] [2023-12-02 18:48:33,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:33,466 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:33,466 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:33,467 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:33,469 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-12-02 18:48:33,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:33,534 INFO L262 TraceCheckSpWp]: Trace formula consists of 111 conjuncts, 17 conjunts are in the unsatisfiable core [2023-12-02 18:48:33,535 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:33,591 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:33,591 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:33,652 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:48:33,673 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:33,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [140489728] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:33,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2041033387] [2023-12-02 18:48:33,676 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:33,676 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:33,676 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:33,676 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:33,676 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:34,359 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:35,090 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '728#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:35,091 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:35,091 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:35,091 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 13 [2023-12-02 18:48:35,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1801386708] [2023-12-02 18:48:35,091 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:35,091 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2023-12-02 18:48:35,091 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:35,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2023-12-02 18:48:35,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=76, Invalid=386, Unknown=0, NotChecked=0, Total=462 [2023-12-02 18:48:35,092 INFO L87 Difference]: Start difference. First operand 13 states and 14 transitions. Second operand has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:35,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:35,227 INFO L93 Difference]: Finished difference Result 19 states and 20 transitions. [2023-12-02 18:48:35,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-12-02 18:48:35,228 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2023-12-02 18:48:35,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:35,228 INFO L225 Difference]: With dead ends: 19 [2023-12-02 18:48:35,228 INFO L226 Difference]: Without dead ends: 19 [2023-12-02 18:48:35,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 188 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=105, Invalid=545, Unknown=0, NotChecked=0, Total=650 [2023-12-02 18:48:35,229 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:35,229 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 1 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:35,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-12-02 18:48:35,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 15. [2023-12-02 18:48:35,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:35,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2023-12-02 18:48:35,232 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 10 [2023-12-02 18:48:35,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:35,232 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2023-12-02 18:48:35,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:35,233 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2023-12-02 18:48:35,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2023-12-02 18:48:35,233 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:35,234 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:48:35,239 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2023-12-02 18:48:35,439 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-12-02 18:48:35,439 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:35,439 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:35,439 INFO L85 PathProgramCache]: Analyzing trace with hash -1934418886, now seen corresponding path program 1 times [2023-12-02 18:48:35,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:35,439 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354425005] [2023-12-02 18:48:35,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:35,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:35,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:35,750 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:35,750 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:35,750 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354425005] [2023-12-02 18:48:35,750 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354425005] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:35,751 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1452072800] [2023-12-02 18:48:35,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:35,751 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:35,751 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:35,752 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:35,755 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-12-02 18:48:35,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:35,840 INFO L262 TraceCheckSpWp]: Trace formula consists of 117 conjuncts, 29 conjunts are in the unsatisfiable core [2023-12-02 18:48:35,842 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:35,894 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:48:35,898 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:48:35,900 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:48:36,006 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:36,006 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:36,163 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:48:36,189 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:36,190 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1452072800] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:36,190 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [162736770] [2023-12-02 18:48:36,192 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:36,192 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:36,193 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:36,193 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:36,193 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:37,061 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:37,910 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '858#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:37,910 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:37,910 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:37,910 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 6] total 18 [2023-12-02 18:48:37,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [84013997] [2023-12-02 18:48:37,911 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:37,911 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-12-02 18:48:37,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:37,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-12-02 18:48:37,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=87, Invalid=669, Unknown=0, NotChecked=0, Total=756 [2023-12-02 18:48:37,912 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:38,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:38,134 INFO L93 Difference]: Finished difference Result 18 states and 19 transitions. [2023-12-02 18:48:38,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-12-02 18:48:38,134 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2023-12-02 18:48:38,134 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:38,134 INFO L225 Difference]: With dead ends: 18 [2023-12-02 18:48:38,134 INFO L226 Difference]: Without dead ends: 18 [2023-12-02 18:48:38,135 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 222 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=172, Invalid=1018, Unknown=0, NotChecked=0, Total=1190 [2023-12-02 18:48:38,136 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 62 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:38,136 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 0 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:38,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2023-12-02 18:48:38,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 16. [2023-12-02 18:48:38,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:38,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2023-12-02 18:48:38,138 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 11 [2023-12-02 18:48:38,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:38,138 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2023-12-02 18:48:38,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:38,138 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2023-12-02 18:48:38,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-12-02 18:48:38,139 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:38,139 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2023-12-02 18:48:38,143 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2023-12-02 18:48:38,339 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2023-12-02 18:48:38,339 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:38,340 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:38,340 INFO L85 PathProgramCache]: Analyzing trace with hash 744290048, now seen corresponding path program 2 times [2023-12-02 18:48:38,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:38,340 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964512331] [2023-12-02 18:48:38,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:38,340 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:38,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:38,636 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:38,637 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:38,637 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964512331] [2023-12-02 18:48:38,637 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964512331] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:38,637 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1605452912] [2023-12-02 18:48:38,637 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:48:38,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:38,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:38,638 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:38,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-12-02 18:48:38,721 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2023-12-02 18:48:38,721 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:48:38,722 INFO L262 TraceCheckSpWp]: Trace formula consists of 134 conjuncts, 35 conjunts are in the unsatisfiable core [2023-12-02 18:48:38,725 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:38,730 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:48:38,811 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-12-02 18:48:38,842 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:48:38,880 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:38,880 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:38,925 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:48:38,925 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:48:38,931 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:48:38,931 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:48:38,990 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:38,990 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1605452912] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:38,991 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [585820840] [2023-12-02 18:48:38,993 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:38,993 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:38,993 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:38,993 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:38,993 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:39,734 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:40,481 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1007#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:40,481 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:40,481 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:40,481 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 21 [2023-12-02 18:48:40,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946536640] [2023-12-02 18:48:40,482 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:40,482 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2023-12-02 18:48:40,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:40,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2023-12-02 18:48:40,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=712, Unknown=6, NotChecked=0, Total=812 [2023-12-02 18:48:40,483 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 21 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 21 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:40,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:40,657 INFO L93 Difference]: Finished difference Result 26 states and 27 transitions. [2023-12-02 18:48:40,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-12-02 18:48:40,657 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 21 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-12-02 18:48:40,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:40,658 INFO L225 Difference]: With dead ends: 26 [2023-12-02 18:48:40,658 INFO L226 Difference]: Without dead ends: 19 [2023-12-02 18:48:40,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 273 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=154, Invalid=1029, Unknown=7, NotChecked=0, Total=1190 [2023-12-02 18:48:40,659 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 28 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:40,659 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 30 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:40,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-12-02 18:48:40,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 18. [2023-12-02 18:48:40,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 16 states have (on average 1.1875) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:40,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2023-12-02 18:48:40,662 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 13 [2023-12-02 18:48:40,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:40,662 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2023-12-02 18:48:40,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 21 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:40,662 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2023-12-02 18:48:40,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2023-12-02 18:48:40,663 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:40,663 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2023-12-02 18:48:40,668 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2023-12-02 18:48:40,863 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2023-12-02 18:48:40,863 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:40,864 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:40,864 INFO L85 PathProgramCache]: Analyzing trace with hash 1243768081, now seen corresponding path program 3 times [2023-12-02 18:48:40,864 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:40,864 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50097071] [2023-12-02 18:48:40,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:40,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:40,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:41,037 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:41,037 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:41,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50097071] [2023-12-02 18:48:41,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50097071] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:41,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [258733622] [2023-12-02 18:48:41,037 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:48:41,037 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:41,038 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:41,038 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:41,044 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-12-02 18:48:41,127 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:48:41,128 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:48:41,129 INFO L262 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 23 conjunts are in the unsatisfiable core [2023-12-02 18:48:41,131 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:41,138 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:48:41,213 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:41,213 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:41,345 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:41,346 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [258733622] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:41,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1715772115] [2023-12-02 18:48:41,348 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:41,348 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:41,348 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:41,348 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:41,348 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:41,890 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:42,408 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1175#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:42,408 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:42,408 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:42,408 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 19 [2023-12-02 18:48:42,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2055599452] [2023-12-02 18:48:42,408 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:42,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-12-02 18:48:42,408 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:42,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-12-02 18:48:42,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=655, Unknown=0, NotChecked=0, Total=756 [2023-12-02 18:48:42,410 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:42,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:42,577 INFO L93 Difference]: Finished difference Result 23 states and 24 transitions. [2023-12-02 18:48:42,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-12-02 18:48:42,577 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2023-12-02 18:48:42,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:42,577 INFO L225 Difference]: With dead ends: 23 [2023-12-02 18:48:42,577 INFO L226 Difference]: Without dead ends: 23 [2023-12-02 18:48:42,578 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 254 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=147, Invalid=909, Unknown=0, NotChecked=0, Total=1056 [2023-12-02 18:48:42,578 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 38 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 207 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 207 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:42,578 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 6 Invalid, 209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 207 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:42,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2023-12-02 18:48:42,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 20. [2023-12-02 18:48:42,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 18 states have (on average 1.1666666666666667) internal successors, (21), 19 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:42,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 21 transitions. [2023-12-02 18:48:42,581 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 21 transitions. Word has length 15 [2023-12-02 18:48:42,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:42,581 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 21 transitions. [2023-12-02 18:48:42,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:42,581 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 21 transitions. [2023-12-02 18:48:42,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-12-02 18:48:42,582 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:42,582 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2023-12-02 18:48:42,586 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2023-12-02 18:48:42,782 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2023-12-02 18:48:42,782 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:42,783 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:42,783 INFO L85 PathProgramCache]: Analyzing trace with hash -97895165, now seen corresponding path program 2 times [2023-12-02 18:48:42,783 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:42,783 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896525238] [2023-12-02 18:48:42,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:42,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:42,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:43,105 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:43,105 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:43,105 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896525238] [2023-12-02 18:48:43,105 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896525238] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:43,106 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2136623631] [2023-12-02 18:48:43,106 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:48:43,106 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:43,106 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:43,107 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:43,108 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2023-12-02 18:48:43,276 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2023-12-02 18:48:43,276 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:48:43,277 INFO L262 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 41 conjunts are in the unsatisfiable core [2023-12-02 18:48:43,279 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:43,324 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:48:43,327 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:48:43,330 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:48:43,695 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:43,695 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:43,900 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:48:43,938 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 4 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:43,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2136623631] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:43,938 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [457646522] [2023-12-02 18:48:43,939 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:43,940 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:43,940 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:43,940 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:43,940 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:44,530 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:45,348 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1352#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:45,349 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:45,349 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:45,349 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 24 [2023-12-02 18:48:45,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202436120] [2023-12-02 18:48:45,349 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:45,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2023-12-02 18:48:45,350 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:45,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2023-12-02 18:48:45,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=995, Unknown=0, NotChecked=0, Total=1122 [2023-12-02 18:48:45,351 INFO L87 Difference]: Start difference. First operand 20 states and 21 transitions. Second operand has 26 states, 25 states have (on average 1.92) internal successors, (48), 25 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:45,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:45,880 INFO L93 Difference]: Finished difference Result 22 states and 23 transitions. [2023-12-02 18:48:45,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-12-02 18:48:45,880 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 1.92) internal successors, (48), 25 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-12-02 18:48:45,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:45,880 INFO L225 Difference]: With dead ends: 22 [2023-12-02 18:48:45,881 INFO L226 Difference]: Without dead ends: 22 [2023-12-02 18:48:45,881 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 21 SyntacticMatches, 1 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 445 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=274, Invalid=1706, Unknown=0, NotChecked=0, Total=1980 [2023-12-02 18:48:45,882 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 89 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:45,882 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 0 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:45,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2023-12-02 18:48:45,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 21. [2023-12-02 18:48:45,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 19 states have (on average 1.1578947368421053) internal successors, (22), 20 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:45,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 22 transitions. [2023-12-02 18:48:45,884 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 22 transitions. Word has length 16 [2023-12-02 18:48:45,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:45,885 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 22 transitions. [2023-12-02 18:48:45,885 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 1.92) internal successors, (48), 25 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:45,885 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 22 transitions. [2023-12-02 18:48:45,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-12-02 18:48:45,885 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:45,885 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 1, 1, 1, 1, 1] [2023-12-02 18:48:45,890 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2023-12-02 18:48:46,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2023-12-02 18:48:46,086 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:46,086 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:46,086 INFO L85 PathProgramCache]: Analyzing trace with hash 412027273, now seen corresponding path program 4 times [2023-12-02 18:48:46,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:46,087 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [831383131] [2023-12-02 18:48:46,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:46,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:46,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:46,461 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:46,461 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:46,461 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [831383131] [2023-12-02 18:48:46,461 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [831383131] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:46,461 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2013217825] [2023-12-02 18:48:46,462 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:48:46,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:46,462 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:46,463 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:46,466 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2023-12-02 18:48:46,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:46,557 INFO L262 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 44 conjunts are in the unsatisfiable core [2023-12-02 18:48:46,559 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:46,564 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:48:46,659 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-12-02 18:48:46,688 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:48:46,704 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:48:46,725 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:46,726 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:46,810 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:48:46,810 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:48:46,815 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:48:46,815 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:48:46,874 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:46,874 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2013217825] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:46,874 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1402757161] [2023-12-02 18:48:46,875 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:46,875 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:46,876 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:46,876 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:46,876 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:47,439 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:48,285 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1549#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:48,286 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:48,286 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:48,286 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 22 [2023-12-02 18:48:48,286 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [853332414] [2023-12-02 18:48:48,286 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:48,286 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-12-02 18:48:48,286 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:48,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-12-02 18:48:48,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=765, Unknown=13, NotChecked=0, Total=870 [2023-12-02 18:48:48,288 INFO L87 Difference]: Start difference. First operand 21 states and 22 transitions. Second operand has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:48,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:48,510 INFO L93 Difference]: Finished difference Result 34 states and 35 transitions. [2023-12-02 18:48:48,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-12-02 18:48:48,511 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2023-12-02 18:48:48,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:48,511 INFO L225 Difference]: With dead ends: 34 [2023-12-02 18:48:48,511 INFO L226 Difference]: Without dead ends: 24 [2023-12-02 18:48:48,512 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 221 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=141, Invalid=1106, Unknown=13, NotChecked=0, Total=1260 [2023-12-02 18:48:48,512 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 13 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:48,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 37 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:48,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2023-12-02 18:48:48,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 23. [2023-12-02 18:48:48,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 21 states have (on average 1.1428571428571428) internal successors, (24), 22 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:48,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 24 transitions. [2023-12-02 18:48:48,518 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 24 transitions. Word has length 18 [2023-12-02 18:48:48,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:48,519 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 24 transitions. [2023-12-02 18:48:48,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:48,519 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 24 transitions. [2023-12-02 18:48:48,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-12-02 18:48:48,519 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:48,520 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2023-12-02 18:48:48,524 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2023-12-02 18:48:48,720 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:48,720 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:48,721 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:48,721 INFO L85 PathProgramCache]: Analyzing trace with hash -1610564072, now seen corresponding path program 5 times [2023-12-02 18:48:48,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:48,721 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852969046] [2023-12-02 18:48:48,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:48,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:48,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:48,927 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:48,928 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:48,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852969046] [2023-12-02 18:48:48,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852969046] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:48,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [827794652] [2023-12-02 18:48:48,928 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:48:48,928 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:48,928 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:48,929 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:48,931 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2023-12-02 18:48:49,030 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2023-12-02 18:48:49,031 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:48:49,032 INFO L262 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 26 conjunts are in the unsatisfiable core [2023-12-02 18:48:49,034 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:49,038 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:48:49,180 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:49,180 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:49,401 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:49,401 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [827794652] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:49,401 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [273010742] [2023-12-02 18:48:49,403 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:49,403 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:49,403 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:49,404 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:49,404 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:49,931 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:50,786 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1768#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:50,786 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:50,786 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:50,786 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 27 [2023-12-02 18:48:50,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [518193852] [2023-12-02 18:48:50,787 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:50,787 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2023-12-02 18:48:50,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:50,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2023-12-02 18:48:50,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=158, Invalid=1102, Unknown=0, NotChecked=0, Total=1260 [2023-12-02 18:48:50,789 INFO L87 Difference]: Start difference. First operand 23 states and 24 transitions. Second operand has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:50,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:50,991 INFO L93 Difference]: Finished difference Result 28 states and 29 transitions. [2023-12-02 18:48:50,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-12-02 18:48:50,992 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-12-02 18:48:50,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:50,992 INFO L225 Difference]: With dead ends: 28 [2023-12-02 18:48:50,992 INFO L226 Difference]: Without dead ends: 28 [2023-12-02 18:48:50,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 498 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=230, Invalid=1492, Unknown=0, NotChecked=0, Total=1722 [2023-12-02 18:48:50,994 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 26 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 235 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:50,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 3 Invalid, 235 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-12-02 18:48:50,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2023-12-02 18:48:50,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 25. [2023-12-02 18:48:50,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 23 states have (on average 1.1304347826086956) internal successors, (26), 24 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:50,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 26 transitions. [2023-12-02 18:48:50,996 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 26 transitions. Word has length 20 [2023-12-02 18:48:50,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:50,997 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 26 transitions. [2023-12-02 18:48:50,997 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:50,997 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 26 transitions. [2023-12-02 18:48:50,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-12-02 18:48:50,998 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:50,998 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2023-12-02 18:48:51,002 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2023-12-02 18:48:51,198 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:51,198 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:51,199 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:51,199 INFO L85 PathProgramCache]: Analyzing trace with hash 1612121308, now seen corresponding path program 3 times [2023-12-02 18:48:51,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:51,199 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [645940163] [2023-12-02 18:48:51,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:51,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:51,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:51,559 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:51,559 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:51,559 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [645940163] [2023-12-02 18:48:51,560 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [645940163] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:51,560 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [789135948] [2023-12-02 18:48:51,560 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:48:51,560 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:51,560 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:51,561 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:51,577 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2023-12-02 18:48:51,689 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:48:51,689 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:48:51,691 INFO L262 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 48 conjunts are in the unsatisfiable core [2023-12-02 18:48:51,693 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:51,738 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:48:51,741 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:48:51,742 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:48:52,025 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:52,025 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:52,328 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:48:52,362 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 9 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:52,362 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [789135948] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:52,363 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1620074022] [2023-12-02 18:48:52,364 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:52,364 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:52,365 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:52,365 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:52,365 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:52,950 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:53,896 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1994#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:53,897 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:53,897 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:53,897 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 10] total 31 [2023-12-02 18:48:53,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248173420] [2023-12-02 18:48:53,897 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:53,897 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-12-02 18:48:53,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:53,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-12-02 18:48:53,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=1497, Unknown=0, NotChecked=0, Total=1640 [2023-12-02 18:48:53,899 INFO L87 Difference]: Start difference. First operand 25 states and 26 transitions. Second operand has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:54,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:54,416 INFO L93 Difference]: Finished difference Result 27 states and 28 transitions. [2023-12-02 18:48:54,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 18:48:54,417 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-12-02 18:48:54,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:54,417 INFO L225 Difference]: With dead ends: 27 [2023-12-02 18:48:54,417 INFO L226 Difference]: Without dead ends: 27 [2023-12-02 18:48:54,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 590 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=335, Invalid=2527, Unknown=0, NotChecked=0, Total=2862 [2023-12-02 18:48:54,419 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 101 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 311 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 314 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 311 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:54,419 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 0 Invalid, 314 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 311 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:48:54,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2023-12-02 18:48:54,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 26. [2023-12-02 18:48:54,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 24 states have (on average 1.125) internal successors, (27), 25 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:54,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 27 transitions. [2023-12-02 18:48:54,421 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 27 transitions. Word has length 21 [2023-12-02 18:48:54,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:54,421 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 27 transitions. [2023-12-02 18:48:54,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:54,421 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 27 transitions. [2023-12-02 18:48:54,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-12-02 18:48:54,422 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:54,422 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 1, 1, 1, 1, 1] [2023-12-02 18:48:54,427 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2023-12-02 18:48:54,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:54,623 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:48:54,623 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:48:54,623 INFO L85 PathProgramCache]: Analyzing trace with hash -1234616542, now seen corresponding path program 6 times [2023-12-02 18:48:54,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:48:54,623 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747852562] [2023-12-02 18:48:54,623 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:48:54,623 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:48:54,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:48:55,083 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:55,084 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:48:55,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747852562] [2023-12-02 18:48:55,084 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747852562] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:48:55,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [28427785] [2023-12-02 18:48:55,084 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:48:55,084 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:48:55,084 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:48:55,085 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:48:55,088 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2023-12-02 18:48:55,222 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:48:55,222 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:48:55,225 INFO L262 TraceCheckSpWp]: Trace formula consists of 206 conjuncts, 57 conjunts are in the unsatisfiable core [2023-12-02 18:48:55,228 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:48:55,235 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:48:55,318 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2023-12-02 18:48:55,379 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:48:55,379 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2023-12-02 18:48:55,451 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:48:55,451 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2023-12-02 18:48:55,526 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:48:55,527 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2023-12-02 18:48:55,627 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:48:55,628 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 15 [2023-12-02 18:48:55,706 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:55,706 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:48:56,267 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 734 treesize of output 710 [2023-12-02 18:48:56,761 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:48:56,761 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [28427785] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:48:56,761 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [809066966] [2023-12-02 18:48:56,762 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:48:56,763 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:48:56,763 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:48:56,763 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:48:56,763 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:48:57,255 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:48:58,226 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2250#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:48:58,226 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:48:58,226 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:48:58,226 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 14] total 37 [2023-12-02 18:48:58,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1770278272] [2023-12-02 18:48:58,226 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:48:58,227 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2023-12-02 18:48:58,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:48:58,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2023-12-02 18:48:58,228 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=1820, Unknown=0, NotChecked=0, Total=1980 [2023-12-02 18:48:58,228 INFO L87 Difference]: Start difference. First operand 26 states and 27 transitions. Second operand has 37 states, 37 states have (on average 1.8108108108108107) internal successors, (67), 37 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:59,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:48:59,812 INFO L93 Difference]: Finished difference Result 47 states and 48 transitions. [2023-12-02 18:48:59,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-12-02 18:48:59,813 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 1.8108108108108107) internal successors, (67), 37 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2023-12-02 18:48:59,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:48:59,813 INFO L225 Difference]: With dead ends: 47 [2023-12-02 18:48:59,813 INFO L226 Difference]: Without dead ends: 34 [2023-12-02 18:48:59,815 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 39 SyntacticMatches, 1 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 690 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=385, Invalid=3775, Unknown=0, NotChecked=0, Total=4160 [2023-12-02 18:48:59,815 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 64 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 629 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 636 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 629 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 18:48:59,816 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 11 Invalid, 636 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 629 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 18:48:59,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2023-12-02 18:48:59,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 30. [2023-12-02 18:48:59,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 28 states have (on average 1.1071428571428572) internal successors, (31), 29 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:59,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 31 transitions. [2023-12-02 18:48:59,818 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 31 transitions. Word has length 23 [2023-12-02 18:48:59,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:48:59,818 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 31 transitions. [2023-12-02 18:48:59,818 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 1.8108108108108107) internal successors, (67), 37 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:48:59,818 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 31 transitions. [2023-12-02 18:48:59,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-12-02 18:48:59,819 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:48:59,819 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 1, 1, 1, 1, 1] [2023-12-02 18:48:59,823 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2023-12-02 18:49:00,019 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2023-12-02 18:49:00,019 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:00,020 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:00,020 INFO L85 PathProgramCache]: Analyzing trace with hash -206278047, now seen corresponding path program 4 times [2023-12-02 18:49:00,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:00,020 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2041806609] [2023-12-02 18:49:00,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:00,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:00,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:00,535 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 38 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:00,536 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:00,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2041806609] [2023-12-02 18:49:00,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2041806609] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:00,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2039084955] [2023-12-02 18:49:00,536 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:49:00,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:00,536 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:00,537 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:00,538 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2023-12-02 18:49:00,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:00,623 INFO L262 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 44 conjunts are in the unsatisfiable core [2023-12-02 18:49:00,625 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:00,667 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:00,669 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:49:00,670 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:49:00,958 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 9 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:00,958 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:01,327 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:49:01,364 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 16 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:01,364 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2039084955] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:01,364 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [877457585] [2023-12-02 18:49:01,365 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:01,365 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:01,366 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:01,366 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:01,366 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:01,877 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:02,885 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2563#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:02,886 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:02,886 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:02,886 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 36 [2023-12-02 18:49:02,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [487930948] [2023-12-02 18:49:02,886 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:02,886 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2023-12-02 18:49:02,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:02,887 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2023-12-02 18:49:02,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=1899, Unknown=0, NotChecked=0, Total=2070 [2023-12-02 18:49:02,888 INFO L87 Difference]: Start difference. First operand 30 states and 31 transitions. Second operand has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:03,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:03,410 INFO L93 Difference]: Finished difference Result 32 states and 33 transitions. [2023-12-02 18:49:03,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2023-12-02 18:49:03,412 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2023-12-02 18:49:03,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:03,413 INFO L225 Difference]: With dead ends: 32 [2023-12-02 18:49:03,413 INFO L226 Difference]: Without dead ends: 32 [2023-12-02 18:49:03,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 719 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=368, Invalid=2938, Unknown=0, NotChecked=0, Total=3306 [2023-12-02 18:49:03,415 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 124 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 462 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 462 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:03,415 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 0 Invalid, 467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 462 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:49:03,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2023-12-02 18:49:03,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 31. [2023-12-02 18:49:03,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 29 states have (on average 1.103448275862069) internal successors, (32), 30 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:03,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 32 transitions. [2023-12-02 18:49:03,417 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 32 transitions. Word has length 26 [2023-12-02 18:49:03,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:03,417 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 32 transitions. [2023-12-02 18:49:03,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:03,417 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 32 transitions. [2023-12-02 18:49:03,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-12-02 18:49:03,418 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:03,418 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 1, 1, 1, 1, 1] [2023-12-02 18:49:03,424 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2023-12-02 18:49:03,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2023-12-02 18:49:03,619 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:03,619 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:03,619 INFO L85 PathProgramCache]: Analyzing trace with hash -664707225, now seen corresponding path program 7 times [2023-12-02 18:49:03,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:03,619 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1563611895] [2023-12-02 18:49:03,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:03,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:03,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:04,100 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:04,100 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:04,100 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1563611895] [2023-12-02 18:49:04,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1563611895] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:04,100 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [239643409] [2023-12-02 18:49:04,101 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:49:04,101 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:04,101 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:04,102 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:04,104 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2023-12-02 18:49:04,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:04,210 INFO L262 TraceCheckSpWp]: Trace formula consists of 242 conjuncts, 62 conjunts are in the unsatisfiable core [2023-12-02 18:49:04,212 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:04,216 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:49:04,357 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-12-02 18:49:04,385 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:04,397 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:04,409 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:04,419 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:04,440 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:04,440 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:04,447 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2023-12-02 18:49:04,496 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2023-12-02 18:49:04,505 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2023-12-02 18:49:04,515 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:49:04,515 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:49:04,521 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:49:04,521 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:49:04,614 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 25 not checked. [2023-12-02 18:49:04,615 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [239643409] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:04,615 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [331324028] [2023-12-02 18:49:04,616 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:04,616 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:04,616 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:04,616 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:04,616 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:05,109 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:06,148 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2850#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:06,148 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:06,148 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:06,148 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 30 [2023-12-02 18:49:06,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035892460] [2023-12-02 18:49:06,149 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:06,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2023-12-02 18:49:06,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:06,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2023-12-02 18:49:06,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=108, Invalid=1085, Unknown=9, NotChecked=204, Total=1406 [2023-12-02 18:49:06,150 INFO L87 Difference]: Start difference. First operand 31 states and 32 transitions. Second operand has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:06,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:06,620 INFO L93 Difference]: Finished difference Result 50 states and 51 transitions. [2023-12-02 18:49:06,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-12-02 18:49:06,620 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2023-12-02 18:49:06,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:06,620 INFO L225 Difference]: With dead ends: 50 [2023-12-02 18:49:06,620 INFO L226 Difference]: Without dead ends: 34 [2023-12-02 18:49:06,622 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 298 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=180, Invalid=1802, Unknown=10, NotChecked=264, Total=2256 [2023-12-02 18:49:06,622 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 64 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 367 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 97 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:06,622 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 37 Invalid, 469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 367 Invalid, 0 Unknown, 97 Unchecked, 0.2s Time] [2023-12-02 18:49:06,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2023-12-02 18:49:06,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 33. [2023-12-02 18:49:06,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 31 states have (on average 1.096774193548387) internal successors, (34), 32 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:06,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 34 transitions. [2023-12-02 18:49:06,624 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 34 transitions. Word has length 28 [2023-12-02 18:49:06,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:06,625 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 34 transitions. [2023-12-02 18:49:06,625 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:06,625 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 34 transitions. [2023-12-02 18:49:06,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-12-02 18:49:06,625 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:06,625 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 1, 1, 1, 1, 1] [2023-12-02 18:49:06,630 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2023-12-02 18:49:06,826 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2023-12-02 18:49:06,826 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:06,826 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:06,826 INFO L85 PathProgramCache]: Analyzing trace with hash -2147357386, now seen corresponding path program 8 times [2023-12-02 18:49:06,826 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:06,826 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1401747003] [2023-12-02 18:49:06,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:06,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:06,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:07,124 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 9 proven. 51 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:07,124 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:07,124 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1401747003] [2023-12-02 18:49:07,124 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1401747003] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:07,125 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [412544051] [2023-12-02 18:49:07,125 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:49:07,125 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:07,125 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:07,127 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:07,128 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2023-12-02 18:49:07,352 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2023-12-02 18:49:07,352 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:07,354 INFO L262 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 33 conjunts are in the unsatisfiable core [2023-12-02 18:49:07,356 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:07,574 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:07,574 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:07,780 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2023-12-02 18:49:07,852 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:07,852 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [412544051] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:07,852 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [385264987] [2023-12-02 18:49:07,853 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:07,854 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:07,854 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:07,854 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:07,854 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:08,395 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:09,071 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3170#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:09,072 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:09,072 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:09,072 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 14, 14] total 33 [2023-12-02 18:49:09,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [94147971] [2023-12-02 18:49:09,072 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:09,072 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2023-12-02 18:49:09,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:09,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2023-12-02 18:49:09,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=221, Invalid=1501, Unknown=0, NotChecked=0, Total=1722 [2023-12-02 18:49:09,073 INFO L87 Difference]: Start difference. First operand 33 states and 34 transitions. Second operand has 34 states, 33 states have (on average 2.303030303030303) internal successors, (76), 34 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:09,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:09,349 INFO L93 Difference]: Finished difference Result 38 states and 39 transitions. [2023-12-02 18:49:09,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-12-02 18:49:09,350 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 2.303030303030303) internal successors, (76), 34 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-12-02 18:49:09,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:09,350 INFO L225 Difference]: With dead ends: 38 [2023-12-02 18:49:09,350 INFO L226 Difference]: Without dead ends: 38 [2023-12-02 18:49:09,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 55 SyntacticMatches, 6 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 882 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=326, Invalid=2124, Unknown=0, NotChecked=0, Total=2450 [2023-12-02 18:49:09,351 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 32 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 370 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 4 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:09,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 4 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 370 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-12-02 18:49:09,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2023-12-02 18:49:09,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 35. [2023-12-02 18:49:09,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 33 states have (on average 1.0909090909090908) internal successors, (36), 34 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:09,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 36 transitions. [2023-12-02 18:49:09,354 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 36 transitions. Word has length 30 [2023-12-02 18:49:09,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:09,354 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 36 transitions. [2023-12-02 18:49:09,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 2.303030303030303) internal successors, (76), 34 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:09,354 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 36 transitions. [2023-12-02 18:49:09,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-12-02 18:49:09,355 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:09,355 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 1, 1, 1, 1, 1] [2023-12-02 18:49:09,360 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2023-12-02 18:49:09,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2023-12-02 18:49:09,555 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:09,555 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:09,556 INFO L85 PathProgramCache]: Analyzing trace with hash -2143569538, now seen corresponding path program 5 times [2023-12-02 18:49:09,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:09,556 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [76343489] [2023-12-02 18:49:09,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:09,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:09,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:10,165 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 9 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:10,165 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:10,165 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [76343489] [2023-12-02 18:49:10,165 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [76343489] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:10,165 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1188581309] [2023-12-02 18:49:10,166 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:49:10,166 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:10,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:10,167 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:10,168 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2023-12-02 18:49:10,502 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2023-12-02 18:49:10,502 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:10,504 INFO L262 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 50 conjunts are in the unsatisfiable core [2023-12-02 18:49:10,507 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:10,549 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:10,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:49:10,553 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:49:11,345 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:11,345 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:11,955 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:49:12,002 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 25 proven. 40 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:12,002 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1188581309] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:12,003 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [572082203] [2023-12-02 18:49:12,004 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:12,004 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:12,004 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:12,004 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:12,004 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:12,500 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:13,542 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3493#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:13,543 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:13,543 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:13,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 44 [2023-12-02 18:49:13,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47666744] [2023-12-02 18:49:13,543 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:13,543 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2023-12-02 18:49:13,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:13,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2023-12-02 18:49:13,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=264, Invalid=2598, Unknown=0, NotChecked=0, Total=2862 [2023-12-02 18:49:13,545 INFO L87 Difference]: Start difference. First operand 35 states and 36 transitions. Second operand has 46 states, 45 states have (on average 2.066666666666667) internal successors, (93), 45 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:14,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:14,635 INFO L93 Difference]: Finished difference Result 37 states and 38 transitions. [2023-12-02 18:49:14,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-12-02 18:49:14,636 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 45 states have (on average 2.066666666666667) internal successors, (93), 45 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2023-12-02 18:49:14,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:14,636 INFO L225 Difference]: With dead ends: 37 [2023-12-02 18:49:14,637 INFO L226 Difference]: Without dead ends: 37 [2023-12-02 18:49:14,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 52 SyntacticMatches, 1 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1328 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=633, Invalid=4623, Unknown=0, NotChecked=0, Total=5256 [2023-12-02 18:49:14,639 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 141 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 483 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 492 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 483 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:14,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 0 Invalid, 492 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 483 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 18:49:14,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2023-12-02 18:49:14,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2023-12-02 18:49:14,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 34 states have (on average 1.088235294117647) internal successors, (37), 35 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:14,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 37 transitions. [2023-12-02 18:49:14,641 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 37 transitions. Word has length 31 [2023-12-02 18:49:14,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:14,641 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 37 transitions. [2023-12-02 18:49:14,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 45 states have (on average 2.066666666666667) internal successors, (93), 45 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:14,641 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 37 transitions. [2023-12-02 18:49:14,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-12-02 18:49:14,642 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:14,642 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 1, 1, 1, 1, 1] [2023-12-02 18:49:14,646 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2023-12-02 18:49:14,842 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2023-12-02 18:49:14,842 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:14,842 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:14,842 INFO L85 PathProgramCache]: Analyzing trace with hash 1613976388, now seen corresponding path program 9 times [2023-12-02 18:49:14,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:14,843 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [717406466] [2023-12-02 18:49:14,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:14,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:14,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:15,472 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:15,472 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:15,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [717406466] [2023-12-02 18:49:15,472 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [717406466] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:15,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1158999880] [2023-12-02 18:49:15,472 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:49:15,473 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:15,473 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:15,473 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:15,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2023-12-02 18:49:15,609 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:49:15,609 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:15,612 INFO L262 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 89 conjunts are in the unsatisfiable core [2023-12-02 18:49:15,615 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:15,829 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-12-02 18:49:15,864 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:49:15,905 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:49:15,947 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:49:15,994 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:49:16,038 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:49:16,077 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:16,077 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:17,029 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 99370 treesize of output 98986 [2023-12-02 18:49:18,907 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:18,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1158999880] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:18,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1665069613] [2023-12-02 18:49:18,909 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:18,909 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:18,909 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:18,909 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:18,910 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:19,376 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:20,437 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3853#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:20,437 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:20,437 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:20,437 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17, 22] total 49 [2023-12-02 18:49:20,438 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209135937] [2023-12-02 18:49:20,438 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:20,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2023-12-02 18:49:20,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:20,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2023-12-02 18:49:20,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=165, Invalid=3027, Unknown=0, NotChecked=0, Total=3192 [2023-12-02 18:49:20,440 INFO L87 Difference]: Start difference. First operand 36 states and 37 transitions. Second operand has 49 states, 49 states have (on average 1.836734693877551) internal successors, (90), 49 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:21,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:21,648 INFO L93 Difference]: Finished difference Result 58 states and 59 transitions. [2023-12-02 18:49:21,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-12-02 18:49:21,649 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 1.836734693877551) internal successors, (90), 49 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2023-12-02 18:49:21,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:21,649 INFO L225 Difference]: With dead ends: 58 [2023-12-02 18:49:21,649 INFO L226 Difference]: Without dead ends: 39 [2023-12-02 18:49:21,651 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 885 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=323, Invalid=5377, Unknown=0, NotChecked=0, Total=5700 [2023-12-02 18:49:21,651 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 77 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 893 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 900 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 893 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:21,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 58 Invalid, 900 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 893 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-12-02 18:49:21,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2023-12-02 18:49:21,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 38. [2023-12-02 18:49:21,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 36 states have (on average 1.0833333333333333) internal successors, (39), 37 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:21,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 39 transitions. [2023-12-02 18:49:21,654 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 39 transitions. Word has length 33 [2023-12-02 18:49:21,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:21,654 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 39 transitions. [2023-12-02 18:49:21,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 1.836734693877551) internal successors, (90), 49 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:21,654 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 39 transitions. [2023-12-02 18:49:21,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-12-02 18:49:21,655 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:21,655 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2023-12-02 18:49:21,661 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2023-12-02 18:49:21,855 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:21,856 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:21,856 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:21,856 INFO L85 PathProgramCache]: Analyzing trace with hash 2032013013, now seen corresponding path program 10 times [2023-12-02 18:49:21,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:21,856 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [780450754] [2023-12-02 18:49:21,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:21,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:21,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:22,268 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 16 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:22,268 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:22,268 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [780450754] [2023-12-02 18:49:22,268 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [780450754] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:22,268 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1445096254] [2023-12-02 18:49:22,268 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:49:22,268 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:22,268 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:22,269 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:22,270 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2023-12-02 18:49:22,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:22,374 INFO L262 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 42 conjunts are in the unsatisfiable core [2023-12-02 18:49:22,375 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:22,559 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 25 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:22,559 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:22,774 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:49:22,891 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 25 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:22,891 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1445096254] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:22,891 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [38156518] [2023-12-02 18:49:22,892 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:22,892 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:22,892 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:22,893 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:22,893 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:23,378 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:24,329 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4232#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:24,329 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:24,329 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:24,329 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 32 [2023-12-02 18:49:24,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1451689009] [2023-12-02 18:49:24,330 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:24,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-12-02 18:49:24,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:24,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-12-02 18:49:24,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=184, Invalid=1456, Unknown=0, NotChecked=0, Total=1640 [2023-12-02 18:49:24,332 INFO L87 Difference]: Start difference. First operand 38 states and 39 transitions. Second operand has 33 states, 32 states have (on average 2.28125) internal successors, (73), 33 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:24,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:24,836 INFO L93 Difference]: Finished difference Result 43 states and 44 transitions. [2023-12-02 18:49:24,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-12-02 18:49:24,836 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 2.28125) internal successors, (73), 33 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2023-12-02 18:49:24,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:24,837 INFO L225 Difference]: With dead ends: 43 [2023-12-02 18:49:24,837 INFO L226 Difference]: Without dead ends: 43 [2023-12-02 18:49:24,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 72 SyntacticMatches, 7 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 860 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=277, Invalid=2173, Unknown=0, NotChecked=0, Total=2450 [2023-12-02 18:49:24,838 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 66 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 607 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 608 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 607 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:24,838 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 1 Invalid, 608 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 607 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 18:49:24,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2023-12-02 18:49:24,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 40. [2023-12-02 18:49:24,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 38 states have (on average 1.0789473684210527) internal successors, (41), 39 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:24,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 41 transitions. [2023-12-02 18:49:24,840 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 41 transitions. Word has length 35 [2023-12-02 18:49:24,841 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:24,841 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 41 transitions. [2023-12-02 18:49:24,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 2.28125) internal successors, (73), 33 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:24,841 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 41 transitions. [2023-12-02 18:49:24,841 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2023-12-02 18:49:24,842 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:24,842 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2023-12-02 18:49:24,847 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2023-12-02 18:49:25,042 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable26,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:25,042 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:25,042 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:25,043 INFO L85 PathProgramCache]: Analyzing trace with hash -1432106049, now seen corresponding path program 6 times [2023-12-02 18:49:25,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:25,043 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116421494] [2023-12-02 18:49:25,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:25,043 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:25,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:25,625 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 16 proven. 77 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:25,625 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:25,625 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116421494] [2023-12-02 18:49:25,625 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116421494] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:25,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [442630212] [2023-12-02 18:49:25,626 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:49:25,626 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:25,626 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:25,627 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:25,627 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2023-12-02 18:49:25,788 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:49:25,788 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:25,791 INFO L262 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 69 conjunts are in the unsatisfiable core [2023-12-02 18:49:25,793 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:25,827 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:49:25,849 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:27,030 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 25 proven. 68 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:27,030 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:27,894 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 36 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:27,894 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [442630212] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:27,894 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [261737060] [2023-12-02 18:49:27,895 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:27,895 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:27,895 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:27,896 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:27,896 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:28,370 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:29,442 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4601#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:29,442 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:29,442 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:29,443 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 17] total 48 [2023-12-02 18:49:29,443 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [197019657] [2023-12-02 18:49:29,443 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:29,443 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2023-12-02 18:49:29,443 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:29,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2023-12-02 18:49:29,444 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=313, Invalid=2993, Unknown=0, NotChecked=0, Total=3306 [2023-12-02 18:49:29,445 INFO L87 Difference]: Start difference. First operand 40 states and 41 transitions. Second operand has 50 states, 49 states have (on average 2.204081632653061) internal successors, (108), 49 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:30,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:30,666 INFO L93 Difference]: Finished difference Result 42 states and 43 transitions. [2023-12-02 18:49:30,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2023-12-02 18:49:30,666 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 49 states have (on average 2.204081632653061) internal successors, (108), 49 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2023-12-02 18:49:30,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:30,666 INFO L225 Difference]: With dead ends: 42 [2023-12-02 18:49:30,666 INFO L226 Difference]: Without dead ends: 42 [2023-12-02 18:49:30,667 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1399 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=651, Invalid=4899, Unknown=0, NotChecked=0, Total=5550 [2023-12-02 18:49:30,668 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 184 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 572 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 184 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 572 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:30,668 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [184 Valid, 0 Invalid, 574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 572 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 18:49:30,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2023-12-02 18:49:30,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 41. [2023-12-02 18:49:30,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 39 states have (on average 1.0769230769230769) internal successors, (42), 40 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:30,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 42 transitions. [2023-12-02 18:49:30,670 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 42 transitions. Word has length 36 [2023-12-02 18:49:30,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:30,670 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 42 transitions. [2023-12-02 18:49:30,671 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 49 states have (on average 2.204081632653061) internal successors, (108), 49 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:30,671 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 42 transitions. [2023-12-02 18:49:30,671 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-12-02 18:49:30,671 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:30,671 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 1, 1, 1, 1, 1] [2023-12-02 18:49:30,676 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2023-12-02 18:49:30,871 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2023-12-02 18:49:30,872 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:30,872 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:30,872 INFO L85 PathProgramCache]: Analyzing trace with hash -1864378043, now seen corresponding path program 11 times [2023-12-02 18:49:30,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:30,872 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1774799365] [2023-12-02 18:49:30,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:30,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:30,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:31,500 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 99 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:31,500 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:31,500 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1774799365] [2023-12-02 18:49:31,500 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1774799365] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:31,500 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1445802953] [2023-12-02 18:49:31,501 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:49:31,501 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:31,501 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:31,502 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:31,503 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2023-12-02 18:49:31,752 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2023-12-02 18:49:31,753 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:31,756 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 84 conjunts are in the unsatisfiable core [2023-12-02 18:49:31,759 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:31,762 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:49:31,966 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-12-02 18:49:31,994 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:32,005 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:32,018 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:32,033 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:32,045 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:32,059 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:49:32,068 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 99 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:32,068 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:32,156 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_844 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_844) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2023-12-02 18:49:32,164 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_844 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_844) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2023-12-02 18:49:32,172 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_844 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_844) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2023-12-02 18:49:32,181 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_844 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_844) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2023-12-02 18:49:32,190 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_844 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_844) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2023-12-02 18:49:32,200 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:49:32,200 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:49:32,205 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:49:32,206 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:49:32,325 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 60 not checked. [2023-12-02 18:49:32,325 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1445802953] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:32,325 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [916135126] [2023-12-02 18:49:32,326 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:32,326 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:32,326 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:32,326 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:32,327 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:32,806 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:33,866 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4986#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:33,866 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:33,866 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:33,866 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 20] total 38 [2023-12-02 18:49:33,866 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [553404157] [2023-12-02 18:49:33,866 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:33,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2023-12-02 18:49:33,867 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:33,867 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2023-12-02 18:49:33,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=1518, Unknown=16, NotChecked=410, Total=2070 [2023-12-02 18:49:33,868 INFO L87 Difference]: Start difference. First operand 41 states and 42 transitions. Second operand has 38 states, 38 states have (on average 2.0526315789473686) internal successors, (78), 38 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:34,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:34,523 INFO L93 Difference]: Finished difference Result 66 states and 67 transitions. [2023-12-02 18:49:34,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-12-02 18:49:34,524 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.0526315789473686) internal successors, (78), 38 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2023-12-02 18:49:34,524 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:34,524 INFO L225 Difference]: With dead ends: 66 [2023-12-02 18:49:34,524 INFO L226 Difference]: Without dead ends: 44 [2023-12-02 18:49:34,525 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 58 ConstructedPredicates, 5 IntricatePredicates, 0 DeprecatedPredicates, 405 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=222, Invalid=2752, Unknown=16, NotChecked=550, Total=3540 [2023-12-02 18:49:34,525 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 47 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 729 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 946 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 729 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 210 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:34,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 48 Invalid, 946 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 729 Invalid, 0 Unknown, 210 Unchecked, 0.3s Time] [2023-12-02 18:49:34,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2023-12-02 18:49:34,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 43. [2023-12-02 18:49:34,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 41 states have (on average 1.0731707317073171) internal successors, (44), 42 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:34,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 44 transitions. [2023-12-02 18:49:34,528 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 44 transitions. Word has length 38 [2023-12-02 18:49:34,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:34,528 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 44 transitions. [2023-12-02 18:49:34,528 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.0526315789473686) internal successors, (78), 38 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:34,528 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 44 transitions. [2023-12-02 18:49:34,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-12-02 18:49:34,528 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:34,529 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2023-12-02 18:49:34,534 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2023-12-02 18:49:34,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2023-12-02 18:49:34,729 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:34,729 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:34,729 INFO L85 PathProgramCache]: Analyzing trace with hash -1948209068, now seen corresponding path program 12 times [2023-12-02 18:49:34,730 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:34,730 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1252025464] [2023-12-02 18:49:34,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:34,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:34,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:35,129 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 25 proven. 94 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:35,130 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:35,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1252025464] [2023-12-02 18:49:35,130 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1252025464] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:35,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [917111633] [2023-12-02 18:49:35,130 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:49:35,130 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:35,130 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:35,131 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:35,132 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2023-12-02 18:49:35,491 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:49:35,491 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:35,494 INFO L262 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 48 conjunts are in the unsatisfiable core [2023-12-02 18:49:35,496 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:35,500 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:35,717 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 36 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:35,717 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:36,154 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 36 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:36,154 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [917111633] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:36,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1748269531] [2023-12-02 18:49:36,155 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:36,155 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:36,156 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:36,156 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:36,156 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:36,643 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:37,583 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5410#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:37,584 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:37,584 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:37,584 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 18] total 44 [2023-12-02 18:49:37,584 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823624737] [2023-12-02 18:49:37,584 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:37,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2023-12-02 18:49:37,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:37,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2023-12-02 18:49:37,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=316, Invalid=2440, Unknown=0, NotChecked=0, Total=2756 [2023-12-02 18:49:37,585 INFO L87 Difference]: Start difference. First operand 43 states and 44 transitions. Second operand has 45 states, 44 states have (on average 2.25) internal successors, (99), 45 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:38,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:38,038 INFO L93 Difference]: Finished difference Result 48 states and 49 transitions. [2023-12-02 18:49:38,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2023-12-02 18:49:38,039 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 2.25) internal successors, (99), 45 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2023-12-02 18:49:38,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:38,039 INFO L225 Difference]: With dead ends: 48 [2023-12-02 18:49:38,039 INFO L226 Difference]: Without dead ends: 48 [2023-12-02 18:49:38,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1214 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=442, Invalid=3464, Unknown=0, NotChecked=0, Total=3906 [2023-12-02 18:49:38,040 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 40 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 656 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 657 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 656 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:38,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 5 Invalid, 657 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 656 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 18:49:38,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2023-12-02 18:49:38,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 45. [2023-12-02 18:49:38,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 43 states have (on average 1.069767441860465) internal successors, (46), 44 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:38,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 46 transitions. [2023-12-02 18:49:38,042 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 46 transitions. Word has length 40 [2023-12-02 18:49:38,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:38,042 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 46 transitions. [2023-12-02 18:49:38,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 2.25) internal successors, (99), 45 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:38,042 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 46 transitions. [2023-12-02 18:49:38,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-12-02 18:49:38,043 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:38,043 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2023-12-02 18:49:38,048 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2023-12-02 18:49:38,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:38,243 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:38,244 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:38,244 INFO L85 PathProgramCache]: Analyzing trace with hash -264938976, now seen corresponding path program 7 times [2023-12-02 18:49:38,244 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:38,244 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1851394063] [2023-12-02 18:49:38,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:38,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:38,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:38,918 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 25 proven. 101 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:38,918 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:38,918 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1851394063] [2023-12-02 18:49:38,918 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1851394063] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:38,918 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [517747447] [2023-12-02 18:49:38,919 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:49:38,919 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:38,919 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:38,919 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:38,920 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2023-12-02 18:49:39,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:39,054 INFO L262 TraceCheckSpWp]: Trace formula consists of 333 conjuncts, 76 conjunts are in the unsatisfiable core [2023-12-02 18:49:39,056 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:39,101 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:39,108 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:49:40,242 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 36 proven. 90 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:40,243 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:41,145 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 49 proven. 77 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:41,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [517747447] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:41,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [277331755] [2023-12-02 18:49:41,146 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:41,146 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:41,147 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:41,147 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:41,147 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:41,635 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:42,789 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5827#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:42,790 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:42,790 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:42,790 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 54 [2023-12-02 18:49:42,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1635395389] [2023-12-02 18:49:42,790 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:42,790 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2023-12-02 18:49:42,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:42,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2023-12-02 18:49:42,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=297, Invalid=3735, Unknown=0, NotChecked=0, Total=4032 [2023-12-02 18:49:42,792 INFO L87 Difference]: Start difference. First operand 45 states and 46 transitions. Second operand has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:44,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:44,103 INFO L93 Difference]: Finished difference Result 47 states and 48 transitions. [2023-12-02 18:49:44,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-12-02 18:49:44,103 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2023-12-02 18:49:44,104 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:44,104 INFO L225 Difference]: With dead ends: 47 [2023-12-02 18:49:44,104 INFO L226 Difference]: Without dead ends: 47 [2023-12-02 18:49:44,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 157 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1607 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=683, Invalid=5959, Unknown=0, NotChecked=0, Total=6642 [2023-12-02 18:49:44,105 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 226 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 944 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 950 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 944 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:44,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 0 Invalid, 950 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 944 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 18:49:44,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2023-12-02 18:49:44,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 46. [2023-12-02 18:49:44,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 44 states have (on average 1.0681818181818181) internal successors, (47), 45 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:44,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 47 transitions. [2023-12-02 18:49:44,107 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 47 transitions. Word has length 41 [2023-12-02 18:49:44,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:44,107 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 47 transitions. [2023-12-02 18:49:44,107 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:44,107 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 47 transitions. [2023-12-02 18:49:44,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-12-02 18:49:44,108 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:44,108 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 7, 1, 1, 1, 1, 1] [2023-12-02 18:49:44,113 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2023-12-02 18:49:44,308 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:44,308 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:44,308 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:44,309 INFO L85 PathProgramCache]: Analyzing trace with hash -1203285146, now seen corresponding path program 13 times [2023-12-02 18:49:44,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:44,309 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [566647808] [2023-12-02 18:49:44,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:44,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:44,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:45,070 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:45,070 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:45,070 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [566647808] [2023-12-02 18:49:45,070 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [566647808] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:45,070 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [487033178] [2023-12-02 18:49:45,070 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:49:45,070 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:45,071 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:45,071 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:45,072 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2023-12-02 18:49:45,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:45,205 INFO L262 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 95 conjunts are in the unsatisfiable core [2023-12-02 18:49:45,208 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:45,214 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:49:45,329 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-12-02 18:49:45,339 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,372 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,406 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,440 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,474 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,510 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,547 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-12-02 18:49:45,603 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:45,603 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:45,635 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1066 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1066) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2023-12-02 18:49:45,641 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1066 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1066) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2023-12-02 18:49:45,702 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1066 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1066) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2023-12-02 18:49:45,768 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1066 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1066) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2023-12-02 18:49:45,880 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:49:45,881 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:49:45,886 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:49:45,886 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:49:45,889 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-12-02 18:49:46,272 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 62 not checked. [2023-12-02 18:49:46,272 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [487033178] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:46,272 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [655000357] [2023-12-02 18:49:46,273 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:46,273 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:46,273 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:46,273 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:46,274 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:46,757 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:47,826 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6266#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:47,826 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:47,826 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:47,826 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 22, 23] total 50 [2023-12-02 18:49:47,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1110429898] [2023-12-02 18:49:47,826 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:47,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2023-12-02 18:49:47,827 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:47,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2023-12-02 18:49:47,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=2687, Unknown=24, NotChecked=428, Total=3306 [2023-12-02 18:49:47,828 INFO L87 Difference]: Start difference. First operand 46 states and 47 transitions. Second operand has 50 states, 50 states have (on average 2.08) internal successors, (104), 50 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:48,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:48,778 INFO L93 Difference]: Finished difference Result 74 states and 75 transitions. [2023-12-02 18:49:48,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2023-12-02 18:49:48,778 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 2.08) internal successors, (104), 50 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2023-12-02 18:49:48,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:48,778 INFO L225 Difference]: With dead ends: 74 [2023-12-02 18:49:48,778 INFO L226 Difference]: Without dead ends: 49 [2023-12-02 18:49:48,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 861 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=276, Invalid=4408, Unknown=24, NotChecked=548, Total=5256 [2023-12-02 18:49:48,779 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 51 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 1189 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 1388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 1189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 189 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:48,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 62 Invalid, 1388 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 1189 Invalid, 0 Unknown, 189 Unchecked, 0.5s Time] [2023-12-02 18:49:48,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2023-12-02 18:49:48,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 48. [2023-12-02 18:49:48,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 46 states have (on average 1.065217391304348) internal successors, (49), 47 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:48,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 49 transitions. [2023-12-02 18:49:48,781 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 49 transitions. Word has length 43 [2023-12-02 18:49:48,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:48,782 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 49 transitions. [2023-12-02 18:49:48,782 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 2.08) internal successors, (104), 50 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:48,782 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 49 transitions. [2023-12-02 18:49:48,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-12-02 18:49:48,782 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:48,782 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2023-12-02 18:49:48,787 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2023-12-02 18:49:48,983 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:48,983 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:48,983 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:48,983 INFO L85 PathProgramCache]: Analyzing trace with hash -1731359305, now seen corresponding path program 14 times [2023-12-02 18:49:48,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:48,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355003045] [2023-12-02 18:49:48,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:48,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:49,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:49,508 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 36 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:49,508 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:49,508 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355003045] [2023-12-02 18:49:49,508 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355003045] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:49,508 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [171003951] [2023-12-02 18:49:49,508 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:49:49,508 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:49,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:49,509 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:49,510 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2023-12-02 18:49:50,127 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2023-12-02 18:49:50,127 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:50,130 INFO L262 TraceCheckSpWp]: Trace formula consists of 363 conjuncts, 46 conjunts are in the unsatisfiable core [2023-12-02 18:49:50,133 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:50,137 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:50,512 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:50,512 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:51,113 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:51,114 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [171003951] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:51,114 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1853095441] [2023-12-02 18:49:51,114 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:51,114 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:51,115 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:51,115 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:51,115 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:51,614 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:52,508 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6749#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:52,509 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:52,509 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:52,509 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 20] total 57 [2023-12-02 18:49:52,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391609196] [2023-12-02 18:49:52,509 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:52,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2023-12-02 18:49:52,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:52,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2023-12-02 18:49:52,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=538, Invalid=3752, Unknown=0, NotChecked=0, Total=4290 [2023-12-02 18:49:52,510 INFO L87 Difference]: Start difference. First operand 48 states and 49 transitions. Second operand has 58 states, 57 states have (on average 2.3333333333333335) internal successors, (133), 58 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:53,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:53,119 INFO L93 Difference]: Finished difference Result 53 states and 54 transitions. [2023-12-02 18:49:53,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-12-02 18:49:53,119 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 57 states have (on average 2.3333333333333335) internal successors, (133), 58 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2023-12-02 18:49:53,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:53,119 INFO L225 Difference]: With dead ends: 53 [2023-12-02 18:49:53,120 INFO L226 Difference]: Without dead ends: 53 [2023-12-02 18:49:53,120 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2028 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=740, Invalid=5112, Unknown=0, NotChecked=0, Total=5852 [2023-12-02 18:49:53,121 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 78 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 651 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 652 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 651 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:53,121 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 1 Invalid, 652 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 651 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-12-02 18:49:53,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2023-12-02 18:49:53,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 50. [2023-12-02 18:49:53,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 48 states have (on average 1.0625) internal successors, (51), 49 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:53,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 51 transitions. [2023-12-02 18:49:53,123 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 51 transitions. Word has length 45 [2023-12-02 18:49:53,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:53,123 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 51 transitions. [2023-12-02 18:49:53,123 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 57 states have (on average 2.3333333333333335) internal successors, (133), 58 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:53,123 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 51 transitions. [2023-12-02 18:49:53,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-12-02 18:49:53,124 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:53,124 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2023-12-02 18:49:53,130 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2023-12-02 18:49:53,324 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:53,324 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:53,324 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:53,324 INFO L85 PathProgramCache]: Analyzing trace with hash -2132530915, now seen corresponding path program 8 times [2023-12-02 18:49:53,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:53,325 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709741586] [2023-12-02 18:49:53,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:53,325 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:53,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:49:54,047 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 36 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:54,047 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:49:54,047 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709741586] [2023-12-02 18:49:54,047 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709741586] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:49:54,047 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1485595587] [2023-12-02 18:49:54,048 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:49:54,048 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:49:54,048 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:49:54,048 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:49:54,049 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2023-12-02 18:49:54,504 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2023-12-02 18:49:54,504 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:49:54,508 INFO L262 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 76 conjunts are in the unsatisfiable core [2023-12-02 18:49:54,510 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:49:54,549 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:49:54,550 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:49:54,552 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:49:55,333 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 43 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:55,333 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:49:56,248 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:49:56,306 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 64 proven. 100 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:49:56,306 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1485595587] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:49:56,306 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1192081892] [2023-12-02 18:49:56,307 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:49:56,307 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:49:56,307 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:49:56,308 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:49:56,308 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:49:56,739 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:49:57,879 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7215#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:49:57,880 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:49:57,880 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:49:57,880 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 20] total 61 [2023-12-02 18:49:57,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1660582347] [2023-12-02 18:49:57,880 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:49:57,880 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2023-12-02 18:49:57,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:49:57,881 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2023-12-02 18:49:57,881 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=393, Invalid=4577, Unknown=0, NotChecked=0, Total=4970 [2023-12-02 18:49:57,881 INFO L87 Difference]: Start difference. First operand 50 states and 51 transitions. Second operand has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:59,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:49:59,591 INFO L93 Difference]: Finished difference Result 52 states and 53 transitions. [2023-12-02 18:49:59,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2023-12-02 18:49:59,592 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2023-12-02 18:49:59,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:49:59,592 INFO L225 Difference]: With dead ends: 52 [2023-12-02 18:49:59,592 INFO L226 Difference]: Without dead ends: 52 [2023-12-02 18:49:59,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2308 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=1109, Invalid=8593, Unknown=0, NotChecked=0, Total=9702 [2023-12-02 18:49:59,593 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 224 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1098 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 1098 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-12-02 18:49:59,593 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 0 Invalid, 1108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 1098 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-12-02 18:49:59,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2023-12-02 18:49:59,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 51. [2023-12-02 18:49:59,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 49 states have (on average 1.0612244897959184) internal successors, (52), 50 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:59,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 52 transitions. [2023-12-02 18:49:59,595 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 52 transitions. Word has length 46 [2023-12-02 18:49:59,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:49:59,595 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 52 transitions. [2023-12-02 18:49:59,595 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:49:59,595 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 52 transitions. [2023-12-02 18:49:59,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-12-02 18:49:59,595 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:49:59,595 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 8, 1, 1, 1, 1, 1] [2023-12-02 18:49:59,601 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2023-12-02 18:49:59,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2023-12-02 18:49:59,796 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:49:59,796 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:49:59,796 INFO L85 PathProgramCache]: Analyzing trace with hash -662808797, now seen corresponding path program 15 times [2023-12-02 18:49:59,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:49:59,796 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2039938440] [2023-12-02 18:49:59,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:49:59,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:49:59,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:00,598 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:00,598 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:00,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2039938440] [2023-12-02 18:50:00,598 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2039938440] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:00,599 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1557570160] [2023-12-02 18:50:00,599 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:50:00,599 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:00,599 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:00,600 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:00,600 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2023-12-02 18:50:01,201 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:50:01,201 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:50:01,207 INFO L262 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 113 conjunts are in the unsatisfiable core [2023-12-02 18:50:01,211 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:01,583 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-12-02 18:50:01,623 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,624 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,674 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,674 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,725 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,725 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,776 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,776 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,827 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,828 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,879 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,880 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,933 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:01,987 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:01,987 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:50:02,075 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:02,075 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:04,035 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 1210 treesize of output 1162 [2023-12-02 18:50:04,631 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:04,631 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1557570160] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:04,632 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [618147505] [2023-12-02 18:50:04,632 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:04,632 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:04,633 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:04,633 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:04,633 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:05,131 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:06,471 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7729#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:06,471 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:06,472 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:06,472 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 25] total 65 [2023-12-02 18:50:06,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663473506] [2023-12-02 18:50:06,472 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:06,472 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2023-12-02 18:50:06,472 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:06,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2023-12-02 18:50:06,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=5056, Unknown=0, NotChecked=0, Total=5256 [2023-12-02 18:50:06,473 INFO L87 Difference]: Start difference. First operand 51 states and 52 transitions. Second operand has 65 states, 65 states have (on average 2.076923076923077) internal successors, (135), 65 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:08,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:08,424 INFO L93 Difference]: Finished difference Result 82 states and 83 transitions. [2023-12-02 18:50:08,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2023-12-02 18:50:08,424 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 65 states have (on average 2.076923076923077) internal successors, (135), 65 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2023-12-02 18:50:08,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:08,425 INFO L225 Difference]: With dead ends: 82 [2023-12-02 18:50:08,425 INFO L226 Difference]: Without dead ends: 54 [2023-12-02 18:50:08,425 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 96 SyntacticMatches, 6 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1292 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=427, Invalid=9673, Unknown=0, NotChecked=0, Total=10100 [2023-12-02 18:50:08,426 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 86 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1835 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 1846 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1835 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:08,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 83 Invalid, 1846 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1835 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-12-02 18:50:08,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2023-12-02 18:50:08,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 53. [2023-12-02 18:50:08,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 51 states have (on average 1.0588235294117647) internal successors, (54), 52 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:08,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 54 transitions. [2023-12-02 18:50:08,427 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 54 transitions. Word has length 48 [2023-12-02 18:50:08,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:08,427 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 54 transitions. [2023-12-02 18:50:08,427 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 65 states have (on average 2.076923076923077) internal successors, (135), 65 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:08,427 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 54 transitions. [2023-12-02 18:50:08,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-12-02 18:50:08,428 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:08,428 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2023-12-02 18:50:08,433 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2023-12-02 18:50:08,628 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2023-12-02 18:50:08,628 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:08,628 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:08,628 INFO L85 PathProgramCache]: Analyzing trace with hash -553326734, now seen corresponding path program 16 times [2023-12-02 18:50:08,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:08,629 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494208790] [2023-12-02 18:50:08,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:08,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:08,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:09,269 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 49 proven. 149 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:09,269 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:09,269 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494208790] [2023-12-02 18:50:09,270 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494208790] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:09,270 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1328153196] [2023-12-02 18:50:09,270 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:50:09,270 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:09,270 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:09,271 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:09,272 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2023-12-02 18:50:09,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:09,418 INFO L262 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 57 conjunts are in the unsatisfiable core [2023-12-02 18:50:09,420 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:09,722 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 64 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:09,722 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:10,093 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:50:10,259 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 64 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:10,260 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1328153196] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:10,260 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [180804652] [2023-12-02 18:50:10,261 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:10,261 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:10,261 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:10,261 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:10,261 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:10,790 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:11,746 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8267#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:11,746 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:11,746 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:11,746 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 22, 22] total 44 [2023-12-02 18:50:11,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1803862112] [2023-12-02 18:50:11,747 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:11,747 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2023-12-02 18:50:11,747 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:11,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2023-12-02 18:50:11,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=301, Invalid=2455, Unknown=0, NotChecked=0, Total=2756 [2023-12-02 18:50:11,748 INFO L87 Difference]: Start difference. First operand 53 states and 54 transitions. Second operand has 45 states, 44 states have (on average 2.340909090909091) internal successors, (103), 45 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:12,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:12,468 INFO L93 Difference]: Finished difference Result 58 states and 59 transitions. [2023-12-02 18:50:12,469 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2023-12-02 18:50:12,469 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 2.340909090909091) internal successors, (103), 45 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2023-12-02 18:50:12,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:12,469 INFO L225 Difference]: With dead ends: 58 [2023-12-02 18:50:12,469 INFO L226 Difference]: Without dead ends: 58 [2023-12-02 18:50:12,470 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 108 SyntacticMatches, 10 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1604 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=445, Invalid=3715, Unknown=0, NotChecked=0, Total=4160 [2023-12-02 18:50:12,470 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 84 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 876 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 877 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 876 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:12,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 1 Invalid, 877 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 876 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 18:50:12,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2023-12-02 18:50:12,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 55. [2023-12-02 18:50:12,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 53 states have (on average 1.0566037735849056) internal successors, (56), 54 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:12,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 56 transitions. [2023-12-02 18:50:12,472 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 56 transitions. Word has length 50 [2023-12-02 18:50:12,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:12,472 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 56 transitions. [2023-12-02 18:50:12,472 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 2.340909090909091) internal successors, (103), 45 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:12,472 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 56 transitions. [2023-12-02 18:50:12,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-12-02 18:50:12,473 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:12,473 INFO L195 NwaCegarLoop]: trace histogram [10, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2023-12-02 18:50:12,478 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2023-12-02 18:50:12,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2023-12-02 18:50:12,673 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:12,673 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:12,674 INFO L85 PathProgramCache]: Analyzing trace with hash 26740418, now seen corresponding path program 9 times [2023-12-02 18:50:12,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:12,674 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997222259] [2023-12-02 18:50:12,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:12,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:12,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:13,517 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 49 proven. 158 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:13,517 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:13,517 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997222259] [2023-12-02 18:50:13,517 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997222259] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:13,517 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [548237453] [2023-12-02 18:50:13,517 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:50:13,517 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:13,517 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:13,518 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:13,519 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2023-12-02 18:50:13,898 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:50:13,898 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:50:13,902 INFO L262 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 73 conjunts are in the unsatisfiable core [2023-12-02 18:50:13,905 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:13,949 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:50:13,951 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:13,953 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:50:15,518 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 64 proven. 143 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:15,518 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:16,759 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:50:16,822 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 81 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:16,822 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [548237453] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:16,822 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2069376284] [2023-12-02 18:50:16,823 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:16,823 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:16,824 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:16,824 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:16,824 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:17,328 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:18,613 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8779#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:18,614 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:18,614 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:18,614 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 21, 22] total 65 [2023-12-02 18:50:18,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1016411671] [2023-12-02 18:50:18,614 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:18,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2023-12-02 18:50:18,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:18,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2023-12-02 18:50:18,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=496, Invalid=5054, Unknown=0, NotChecked=0, Total=5550 [2023-12-02 18:50:18,616 INFO L87 Difference]: Start difference. First operand 55 states and 56 transitions. Second operand has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:20,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:20,370 INFO L93 Difference]: Finished difference Result 57 states and 58 transitions. [2023-12-02 18:50:20,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2023-12-02 18:50:20,371 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2023-12-02 18:50:20,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:20,371 INFO L225 Difference]: With dead ends: 57 [2023-12-02 18:50:20,371 INFO L226 Difference]: Without dead ends: 57 [2023-12-02 18:50:20,372 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 99 SyntacticMatches, 1 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2544 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=1062, Invalid=8444, Unknown=0, NotChecked=0, Total=9506 [2023-12-02 18:50:20,372 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 159 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1345 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1345 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:20,372 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [159 Valid, 0 Invalid, 1347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1345 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-12-02 18:50:20,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2023-12-02 18:50:20,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2023-12-02 18:50:20,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 54 states have (on average 1.0555555555555556) internal successors, (57), 55 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:20,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 57 transitions. [2023-12-02 18:50:20,374 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 57 transitions. Word has length 51 [2023-12-02 18:50:20,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:20,374 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 57 transitions. [2023-12-02 18:50:20,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:20,374 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 57 transitions. [2023-12-02 18:50:20,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-12-02 18:50:20,374 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:20,375 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 9, 1, 1, 1, 1, 1] [2023-12-02 18:50:20,382 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2023-12-02 18:50:20,575 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2023-12-02 18:50:20,575 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:20,575 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:20,575 INFO L85 PathProgramCache]: Analyzing trace with hash -72261752, now seen corresponding path program 17 times [2023-12-02 18:50:20,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:20,575 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431474360] [2023-12-02 18:50:20,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:20,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:20,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:21,498 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:21,498 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:21,498 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431474360] [2023-12-02 18:50:21,498 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431474360] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:21,498 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [968821257] [2023-12-02 18:50:21,498 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:50:21,498 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:21,498 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:21,499 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:21,500 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2023-12-02 18:50:22,657 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2023-12-02 18:50:22,657 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:50:22,662 INFO L262 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 109 conjunts are in the unsatisfiable core [2023-12-02 18:50:22,666 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:22,669 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:50:22,985 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-12-02 18:50:23,025 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,038 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,049 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,061 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,073 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,085 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,098 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,112 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,126 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:23,136 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:23,136 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:23,230 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1590 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1590) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2023-12-02 18:50:23,632 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1590 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1590) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2023-12-02 18:50:23,642 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:50:23,642 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:50:23,648 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:50:23,648 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:50:23,793 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 165 refuted. 0 times theorem prover too weak. 0 trivial. 51 not checked. [2023-12-02 18:50:23,793 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [968821257] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:23,793 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1026663177] [2023-12-02 18:50:23,794 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:23,794 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:23,794 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:23,794 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:23,795 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:24,282 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:25,236 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9308#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:25,236 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:25,236 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:25,236 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 25, 26] total 50 [2023-12-02 18:50:25,236 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499071999] [2023-12-02 18:50:25,236 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:25,237 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2023-12-02 18:50:25,237 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:25,237 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2023-12-02 18:50:25,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=159, Invalid=2852, Unknown=77, NotChecked=218, Total=3306 [2023-12-02 18:50:25,238 INFO L87 Difference]: Start difference. First operand 56 states and 57 transitions. Second operand has 50 states, 50 states have (on average 2.16) internal successors, (108), 50 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:26,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:26,562 INFO L93 Difference]: Finished difference Result 90 states and 91 transitions. [2023-12-02 18:50:26,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2023-12-02 18:50:26,562 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 2.16) internal successors, (108), 50 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2023-12-02 18:50:26,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:26,562 INFO L225 Difference]: With dead ends: 90 [2023-12-02 18:50:26,562 INFO L226 Difference]: Without dead ends: 59 [2023-12-02 18:50:26,563 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 211 GetRequests, 135 SyntacticMatches, 0 SemanticMatches, 76 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 800 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=297, Invalid=5334, Unknown=77, NotChecked=298, Total=6006 [2023-12-02 18:50:26,563 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 123 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 1617 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 1741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 1617 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 114 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:26,563 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 60 Invalid, 1741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 1617 Invalid, 0 Unknown, 114 Unchecked, 0.6s Time] [2023-12-02 18:50:26,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2023-12-02 18:50:26,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 58. [2023-12-02 18:50:26,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 56 states have (on average 1.0535714285714286) internal successors, (59), 57 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:26,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 59 transitions. [2023-12-02 18:50:26,565 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 59 transitions. Word has length 53 [2023-12-02 18:50:26,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:26,565 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 59 transitions. [2023-12-02 18:50:26,566 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 2.16) internal successors, (108), 50 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:26,566 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 59 transitions. [2023-12-02 18:50:26,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-12-02 18:50:26,566 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:26,566 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2023-12-02 18:50:26,572 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2023-12-02 18:50:26,766 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2023-12-02 18:50:26,767 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:26,767 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:26,767 INFO L85 PathProgramCache]: Analyzing trace with hash 1502849177, now seen corresponding path program 18 times [2023-12-02 18:50:26,767 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:26,767 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061117823] [2023-12-02 18:50:26,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:26,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:26,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:27,492 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 64 proven. 181 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:27,492 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:27,493 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061117823] [2023-12-02 18:50:27,493 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061117823] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:27,493 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1314373646] [2023-12-02 18:50:27,493 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:50:27,493 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:27,493 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:27,494 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:27,494 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2023-12-02 18:50:28,694 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:50:28,694 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:50:28,699 INFO L262 TraceCheckSpWp]: Trace formula consists of 435 conjuncts, 63 conjunts are in the unsatisfiable core [2023-12-02 18:50:28,701 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:28,705 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:50:29,023 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 81 proven. 164 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:29,023 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:29,779 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 81 proven. 164 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:29,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1314373646] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:29,779 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1730796871] [2023-12-02 18:50:29,780 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:29,780 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:29,781 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:29,781 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:29,781 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:30,265 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:31,403 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9888#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:31,403 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:31,403 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:31,403 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 24] total 59 [2023-12-02 18:50:31,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011765435] [2023-12-02 18:50:31,403 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:31,403 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2023-12-02 18:50:31,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:31,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2023-12-02 18:50:31,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=529, Invalid=4027, Unknown=0, NotChecked=0, Total=4556 [2023-12-02 18:50:31,404 INFO L87 Difference]: Start difference. First operand 58 states and 59 transitions. Second operand has 60 states, 59 states have (on average 2.288135593220339) internal successors, (135), 60 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:32,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:32,262 INFO L93 Difference]: Finished difference Result 63 states and 64 transitions. [2023-12-02 18:50:32,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2023-12-02 18:50:32,262 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 59 states have (on average 2.288135593220339) internal successors, (135), 60 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2023-12-02 18:50:32,262 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:32,263 INFO L225 Difference]: With dead ends: 63 [2023-12-02 18:50:32,263 INFO L226 Difference]: Without dead ends: 63 [2023-12-02 18:50:32,263 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2114 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=715, Invalid=5765, Unknown=0, NotChecked=0, Total=6480 [2023-12-02 18:50:32,264 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 129 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 976 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 977 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 976 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:32,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 1 Invalid, 977 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 976 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 18:50:32,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2023-12-02 18:50:32,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 60. [2023-12-02 18:50:32,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 58 states have (on average 1.0517241379310345) internal successors, (61), 59 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:32,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 61 transitions. [2023-12-02 18:50:32,266 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 61 transitions. Word has length 55 [2023-12-02 18:50:32,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:32,266 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 61 transitions. [2023-12-02 18:50:32,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 59 states have (on average 2.288135593220339) internal successors, (135), 60 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:32,266 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 61 transitions. [2023-12-02 18:50:32,266 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-12-02 18:50:32,267 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:32,267 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2023-12-02 18:50:32,273 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2023-12-02 18:50:32,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2023-12-02 18:50:32,467 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:32,467 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:32,467 INFO L85 PathProgramCache]: Analyzing trace with hash -656315781, now seen corresponding path program 10 times [2023-12-02 18:50:32,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:32,468 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1252656367] [2023-12-02 18:50:32,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:32,468 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:32,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:33,515 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 64 proven. 191 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:33,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:33,515 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1252656367] [2023-12-02 18:50:33,515 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1252656367] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:33,516 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [992827526] [2023-12-02 18:50:33,516 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:50:33,516 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:33,516 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:33,517 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:33,517 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2023-12-02 18:50:33,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:33,698 INFO L262 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 98 conjunts are in the unsatisfiable core [2023-12-02 18:50:33,701 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:33,759 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:50:33,761 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:33,763 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:50:34,748 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 81 proven. 174 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:34,748 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:35,918 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:50:35,981 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 100 proven. 155 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:35,981 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [992827526] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:35,981 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [958801363] [2023-12-02 18:50:35,982 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:35,982 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:35,983 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:35,983 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:35,983 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:36,464 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:37,708 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10449#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:37,708 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:37,708 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:37,708 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 72 [2023-12-02 18:50:37,708 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166195475] [2023-12-02 18:50:37,708 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:37,709 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2023-12-02 18:50:37,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:37,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2023-12-02 18:50:37,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=468, Invalid=6174, Unknown=0, NotChecked=0, Total=6642 [2023-12-02 18:50:37,710 INFO L87 Difference]: Start difference. First operand 60 states and 61 transitions. Second operand has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:39,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:39,304 INFO L93 Difference]: Finished difference Result 62 states and 63 transitions. [2023-12-02 18:50:39,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2023-12-02 18:50:39,305 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2023-12-02 18:50:39,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:39,305 INFO L225 Difference]: With dead ends: 62 [2023-12-02 18:50:39,305 INFO L226 Difference]: Without dead ends: 62 [2023-12-02 18:50:39,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 110 SyntacticMatches, 0 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2837 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=1106, Invalid=10024, Unknown=0, NotChecked=0, Total=11130 [2023-12-02 18:50:39,306 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 205 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1825 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1829 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 1825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:39,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [205 Valid, 0 Invalid, 1829 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 1825 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-12-02 18:50:39,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2023-12-02 18:50:39,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 61. [2023-12-02 18:50:39,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 59 states have (on average 1.0508474576271187) internal successors, (62), 60 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:39,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 62 transitions. [2023-12-02 18:50:39,308 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 62 transitions. Word has length 56 [2023-12-02 18:50:39,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:39,308 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 62 transitions. [2023-12-02 18:50:39,308 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:39,308 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 62 transitions. [2023-12-02 18:50:39,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-12-02 18:50:39,309 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:39,309 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 1, 1, 1, 1, 1] [2023-12-02 18:50:39,315 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2023-12-02 18:50:39,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2023-12-02 18:50:39,509 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:39,509 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:39,509 INFO L85 PathProgramCache]: Analyzing trace with hash 640727297, now seen corresponding path program 19 times [2023-12-02 18:50:39,510 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:39,510 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1933755677] [2023-12-02 18:50:39,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:39,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:39,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:40,615 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 265 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:40,615 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:40,616 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1933755677] [2023-12-02 18:50:40,616 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1933755677] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:40,616 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [975280432] [2023-12-02 18:50:40,616 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-12-02 18:50:40,616 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:40,616 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:40,617 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:40,618 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2023-12-02 18:50:40,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:40,793 INFO L262 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 116 conjunts are in the unsatisfiable core [2023-12-02 18:50:40,797 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:40,800 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2023-12-02 18:50:41,192 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-12-02 18:50:41,231 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,243 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,254 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,264 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,276 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,289 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,300 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,312 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,321 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,332 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-12-02 18:50:41,366 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 265 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:41,366 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:41,373 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1887 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1887) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2023-12-02 18:50:41,378 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1887 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1887) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2023-12-02 18:50:41,447 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1887 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1887) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2023-12-02 18:50:41,454 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1887 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1887) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2023-12-02 18:50:41,660 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1887 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1887) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2023-12-02 18:50:41,669 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1887 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1887) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2023-12-02 18:50:41,678 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:50:41,679 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-12-02 18:50:41,684 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-12-02 18:50:41,684 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2023-12-02 18:50:41,831 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 135 refuted. 0 times theorem prover too weak. 0 trivial. 130 not checked. [2023-12-02 18:50:41,831 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [975280432] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:41,831 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1599266667] [2023-12-02 18:50:41,832 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:41,832 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:41,832 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:41,832 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:41,833 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:42,328 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:43,500 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11024#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:43,500 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:43,501 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:43,501 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 28, 28] total 54 [2023-12-02 18:50:43,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1614305579] [2023-12-02 18:50:43,501 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:43,501 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2023-12-02 18:50:43,501 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:43,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2023-12-02 18:50:43,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=165, Invalid=2899, Unknown=40, NotChecked=678, Total=3782 [2023-12-02 18:50:43,502 INFO L87 Difference]: Start difference. First operand 61 states and 62 transitions. Second operand has 54 states, 54 states have (on average 2.2037037037037037) internal successors, (119), 54 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:44,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:44,973 INFO L93 Difference]: Finished difference Result 98 states and 99 transitions. [2023-12-02 18:50:44,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2023-12-02 18:50:44,974 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 2.2037037037037037) internal successors, (119), 54 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2023-12-02 18:50:44,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:44,974 INFO L225 Difference]: With dead ends: 98 [2023-12-02 18:50:44,974 INFO L226 Difference]: Without dead ends: 64 [2023-12-02 18:50:44,974 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 6 IntricatePredicates, 0 DeprecatedPredicates, 788 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=312, Invalid=5674, Unknown=44, NotChecked=942, Total=6972 [2023-12-02 18:50:44,975 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 136 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 1755 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 2139 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1755 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 373 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:44,975 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 66 Invalid, 2139 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1755 Invalid, 0 Unknown, 373 Unchecked, 0.7s Time] [2023-12-02 18:50:44,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-12-02 18:50:44,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 63. [2023-12-02 18:50:44,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 61 states have (on average 1.0491803278688525) internal successors, (64), 62 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:44,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 64 transitions. [2023-12-02 18:50:44,977 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 64 transitions. Word has length 58 [2023-12-02 18:50:44,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:44,977 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 64 transitions. [2023-12-02 18:50:44,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 2.2037037037037037) internal successors, (119), 54 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:44,978 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 64 transitions. [2023-12-02 18:50:44,978 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-12-02 18:50:44,978 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:44,978 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2023-12-02 18:50:44,984 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2023-12-02 18:50:45,179 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2023-12-02 18:50:45,179 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:45,179 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:45,179 INFO L85 PathProgramCache]: Analyzing trace with hash -732532080, now seen corresponding path program 20 times [2023-12-02 18:50:45,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:45,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [796405244] [2023-12-02 18:50:45,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:45,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:45,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:46,032 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 81 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:46,032 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:46,032 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [796405244] [2023-12-02 18:50:46,032 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [796405244] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:46,032 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1838467116] [2023-12-02 18:50:46,032 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:50:46,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:46,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:46,033 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:46,034 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2023-12-02 18:50:46,788 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2023-12-02 18:50:46,788 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:50:46,793 INFO L262 TraceCheckSpWp]: Trace formula consists of 471 conjuncts, 58 conjunts are in the unsatisfiable core [2023-12-02 18:50:46,795 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:46,799 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-12-02 18:50:47,405 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 100 proven. 197 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:47,406 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:48,399 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 100 proven. 197 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:48,399 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1838467116] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:48,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [161584020] [2023-12-02 18:50:48,400 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:48,400 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:48,400 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:48,400 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:48,400 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:48,891 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:50,046 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11668#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:50,046 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:50,046 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:50,046 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 26] total 75 [2023-12-02 18:50:50,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369464963] [2023-12-02 18:50:50,046 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:50,046 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2023-12-02 18:50:50,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:50,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2023-12-02 18:50:50,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=898, Invalid=6074, Unknown=0, NotChecked=0, Total=6972 [2023-12-02 18:50:50,047 INFO L87 Difference]: Start difference. First operand 63 states and 64 transitions. Second operand has 76 states, 75 states have (on average 2.3733333333333335) internal successors, (178), 76 states have internal predecessors, (178), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:50,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:50:50,922 INFO L93 Difference]: Finished difference Result 68 states and 69 transitions. [2023-12-02 18:50:50,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2023-12-02 18:50:50,922 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 75 states have (on average 2.3733333333333335) internal successors, (178), 76 states have internal predecessors, (178), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2023-12-02 18:50:50,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:50:50,923 INFO L225 Difference]: With dead ends: 68 [2023-12-02 18:50:50,923 INFO L226 Difference]: Without dead ends: 68 [2023-12-02 18:50:50,923 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3414 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=1202, Invalid=8304, Unknown=0, NotChecked=0, Total=9506 [2023-12-02 18:50:50,924 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 96 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1018 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 1019 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1018 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-12-02 18:50:50,924 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 1 Invalid, 1019 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1018 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-12-02 18:50:50,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2023-12-02 18:50:50,925 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 65. [2023-12-02 18:50:50,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 63 states have (on average 1.0476190476190477) internal successors, (66), 64 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:50,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 66 transitions. [2023-12-02 18:50:50,926 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 66 transitions. Word has length 60 [2023-12-02 18:50:50,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:50:50,926 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 66 transitions. [2023-12-02 18:50:50,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 75 states have (on average 2.3733333333333335) internal successors, (178), 76 states have internal predecessors, (178), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:50:50,926 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 66 transitions. [2023-12-02 18:50:50,926 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2023-12-02 18:50:50,926 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:50:50,927 INFO L195 NwaCegarLoop]: trace histogram [12, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2023-12-02 18:50:50,932 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2023-12-02 18:50:51,127 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable41 [2023-12-02 18:50:51,127 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:50:51,127 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:50:51,127 INFO L85 PathProgramCache]: Analyzing trace with hash -1233658012, now seen corresponding path program 11 times [2023-12-02 18:50:51,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:50:51,128 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [872902245] [2023-12-02 18:50:51,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:50:51,128 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:50:51,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:50:52,251 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 81 proven. 227 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:52,251 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:50:52,251 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [872902245] [2023-12-02 18:50:52,251 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [872902245] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:50:52,251 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1223609178] [2023-12-02 18:50:52,251 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-12-02 18:50:52,251 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:50:52,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:50:52,252 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:50:52,253 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2023-12-02 18:50:53,552 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2023-12-02 18:50:53,553 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:50:53,558 INFO L262 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 71 conjunts are in the unsatisfiable core [2023-12-02 18:50:53,561 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:50:53,617 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 1 [2023-12-02 18:50:53,619 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-12-02 18:50:53,621 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-12-02 18:50:55,655 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 91 proven. 217 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:55,656 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:50:57,318 INFO L173 IndexEqualityManager]: detected equality via solver [2023-12-02 18:50:57,394 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 121 proven. 187 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:50:57,395 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1223609178] provided 0 perfect and 2 imperfect interpolant sequences [2023-12-02 18:50:57,395 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1648316232] [2023-12-02 18:50:57,396 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2023-12-02 18:50:57,396 INFO L166 IcfgInterpreter]: Building call graph [2023-12-02 18:50:57,396 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-12-02 18:50:57,396 INFO L176 IcfgInterpreter]: Starting interpretation [2023-12-02 18:50:57,396 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-12-02 18:50:57,869 INFO L180 IcfgInterpreter]: Interpretation finished [2023-12-02 18:50:59,035 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12280#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (<= 2 |ULTIMATE.start_cstrcpy_~from#1.base|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 1 |#StackHeapBarrier|) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 2 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 2 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 2 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 2 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 2 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= 2 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) |ULTIMATE.start_cstrcpy_~to#1.offset|) (= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0))' at error location [2023-12-02 18:50:59,035 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-12-02 18:50:59,035 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-12-02 18:50:59,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 28, 27] total 81 [2023-12-02 18:50:59,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1965257527] [2023-12-02 18:50:59,035 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-12-02 18:50:59,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2023-12-02 18:50:59,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-12-02 18:50:59,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2023-12-02 18:50:59,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=740, Invalid=7450, Unknown=0, NotChecked=0, Total=8190 [2023-12-02 18:50:59,037 INFO L87 Difference]: Start difference. First operand 65 states and 66 transitions. Second operand has 83 states, 82 states have (on average 2.231707317073171) internal successors, (183), 82 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:51:02,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-12-02 18:51:02,322 INFO L93 Difference]: Finished difference Result 67 states and 68 transitions. [2023-12-02 18:51:02,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2023-12-02 18:51:02,323 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 82 states have (on average 2.231707317073171) internal successors, (183), 82 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2023-12-02 18:51:02,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-12-02 18:51:02,323 INFO L225 Difference]: With dead ends: 67 [2023-12-02 18:51:02,323 INFO L226 Difference]: Without dead ends: 67 [2023-12-02 18:51:02,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4271 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=1945, Invalid=14567, Unknown=0, NotChecked=0, Total=16512 [2023-12-02 18:51:02,324 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 434 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1698 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 434 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1725 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 1698 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-12-02 18:51:02,325 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [434 Valid, 0 Invalid, 1725 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 1698 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-12-02 18:51:02,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-12-02 18:51:02,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 66. [2023-12-02 18:51:02,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 64 states have (on average 1.046875) internal successors, (67), 65 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:51:02,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 67 transitions. [2023-12-02 18:51:02,326 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 67 transitions. Word has length 61 [2023-12-02 18:51:02,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-12-02 18:51:02,326 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 67 transitions. [2023-12-02 18:51:02,327 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 82 states have (on average 2.231707317073171) internal successors, (183), 82 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-12-02 18:51:02,327 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 67 transitions. [2023-12-02 18:51:02,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-12-02 18:51:02,327 INFO L187 NwaCegarLoop]: Found error trace [2023-12-02 18:51:02,327 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 11, 11, 1, 1, 1, 1, 1] [2023-12-02 18:51:02,333 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2023-12-02 18:51:02,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:51:02,528 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2023-12-02 18:51:02,528 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-12-02 18:51:02,528 INFO L85 PathProgramCache]: Analyzing trace with hash -134375510, now seen corresponding path program 21 times [2023-12-02 18:51:02,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-12-02 18:51:02,528 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1107625147] [2023-12-02 18:51:02,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-12-02 18:51:02,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-12-02 18:51:02,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-12-02 18:51:03,734 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 319 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:03,734 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-12-02 18:51:03,734 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1107625147] [2023-12-02 18:51:03,734 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1107625147] provided 0 perfect and 1 imperfect interpolant sequences [2023-12-02 18:51:03,734 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [391638482] [2023-12-02 18:51:03,734 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-12-02 18:51:03,734 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-12-02 18:51:03,734 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 [2023-12-02 18:51:03,735 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-12-02 18:51:03,736 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bbc3fdb6-5a92-4fd5-a076-f839e7683917/bin/utaipan-verify-nQ1chXbOIh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2023-12-02 18:51:04,384 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-12-02 18:51:04,384 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-12-02 18:51:04,390 INFO L262 TraceCheckSpWp]: Trace formula consists of 494 conjuncts, 158 conjunts are in the unsatisfiable core [2023-12-02 18:51:04,395 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-12-02 18:51:04,916 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-12-02 18:51:04,970 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,028 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,090 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,156 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,212 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,276 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,336 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,394 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,459 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,519 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,579 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-12-02 18:51:05,672 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 319 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-12-02 18:51:05,673 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-12-02 18:51:42,575 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 879617891368938 treesize of output 879566351761386