./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:26:37,136 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:26:37,138 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:26:37,181 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:26:37,181 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:26:37,182 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:26:37,184 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:26:37,185 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:26:37,187 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:26:37,188 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:26:37,189 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:26:37,190 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:26:37,190 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:26:37,191 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:26:37,193 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:26:37,194 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:26:37,195 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:26:37,196 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:26:37,197 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:26:37,199 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:26:37,201 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:26:37,210 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:26:37,211 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:26:37,212 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:26:37,215 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:26:37,216 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:26:37,216 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:26:37,217 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:26:37,220 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:26:37,221 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:26:37,222 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:26:37,223 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:26:37,224 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:26:37,226 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:26:37,228 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:26:37,230 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:26:37,231 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:26:37,232 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:26:37,232 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:26:37,233 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:26:37,234 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:26:37,234 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-03 02:26:37,258 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:26:37,259 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:26:37,259 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:26:37,259 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:26:37,260 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:26:37,260 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:26:37,260 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:26:37,261 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:26:37,261 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:26:37,261 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:26:37,261 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:26:37,262 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:26:37,262 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:26:37,262 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:26:37,262 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:26:37,263 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:26:37,263 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:26:37,263 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:26:37,264 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-03 02:26:37,264 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-03 02:26:37,264 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:26:37,264 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:26:37,265 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-03 02:26:37,265 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:26:37,265 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:26:37,265 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:26:37,265 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-03 02:26:37,266 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-03 02:26:37,266 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-03 02:26:37,266 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:26:37,266 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-03 02:26:37,267 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:26:37,267 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:26:37,267 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:26:37,267 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:26:37,267 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:26:37,268 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:26:37,268 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:26:37,268 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:26:37,268 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:26:37,269 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:26:37,269 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:26:37,269 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e [2022-11-03 02:26:37,512 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:26:37,536 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:26:37,538 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:26:37,540 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:26:37,540 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:26:37,542 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-03 02:26:37,612 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data/a4d08a766/f266b3e56cb1486eb1d685ec3974d50f/FLAG6e53c040b [2022-11-03 02:26:38,154 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:26:38,160 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-03 02:26:38,171 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data/a4d08a766/f266b3e56cb1486eb1d685ec3974d50f/FLAG6e53c040b [2022-11-03 02:26:38,569 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data/a4d08a766/f266b3e56cb1486eb1d685ec3974d50f [2022-11-03 02:26:38,572 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:26:38,573 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:26:38,575 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:26:38,575 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:26:38,580 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:26:38,581 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:26:38" (1/1) ... [2022-11-03 02:26:38,583 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56b97a3c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:38, skipping insertion in model container [2022-11-03 02:26:38,584 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:26:38" (1/1) ... [2022-11-03 02:26:38,592 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:26:38,651 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:26:38,944 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:26:38,952 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:26:38,988 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:26:39,011 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:26:39,012 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39 WrapperNode [2022-11-03 02:26:39,012 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:26:39,013 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:26:39,014 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:26:39,014 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:26:39,022 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,047 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,079 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-11-03 02:26:39,080 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:26:39,081 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:26:39,082 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:26:39,082 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:26:39,091 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,091 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,106 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,108 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,112 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,126 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,127 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,134 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,137 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:26:39,137 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:26:39,138 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:26:39,138 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:26:39,143 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (1/1) ... [2022-11-03 02:26:39,152 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:26:39,163 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:39,182 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:26:39,194 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:26:39,227 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-03 02:26:39,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-03 02:26:39,227 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 02:26:39,227 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 02:26:39,227 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:26:39,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:26:39,416 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:26:39,418 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:26:39,676 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:26:39,735 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:26:39,736 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-03 02:26:39,738 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:26:39 BoogieIcfgContainer [2022-11-03 02:26:39,739 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:26:39,741 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:26:39,741 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:26:39,745 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:26:39,746 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:26:38" (1/3) ... [2022-11-03 02:26:39,746 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b083713 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:26:39, skipping insertion in model container [2022-11-03 02:26:39,747 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:26:39" (2/3) ... [2022-11-03 02:26:39,747 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1b083713 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:26:39, skipping insertion in model container [2022-11-03 02:26:39,747 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:26:39" (3/3) ... [2022-11-03 02:26:39,749 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrcat-alloca-2.i [2022-11-03 02:26:39,767 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:26:39,768 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-11-03 02:26:39,834 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:26:39,845 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2b8edbfb, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:26:39,846 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-11-03 02:26:39,860 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:39,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-03 02:26:39,878 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:39,879 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-03 02:26:39,879 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:39,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:39,888 INFO L85 PathProgramCache]: Analyzing trace with hash 147851, now seen corresponding path program 1 times [2022-11-03 02:26:39,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:39,899 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [446582839] [2022-11-03 02:26:39,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:39,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:40,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:40,100 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:40,101 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:40,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [446582839] [2022-11-03 02:26:40,102 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [446582839] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:40,102 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:40,102 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-03 02:26:40,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [295600241] [2022-11-03 02:26:40,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:40,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:26:40,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:40,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:26:40,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:26:40,152 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:40,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:40,221 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-11-03 02:26:40,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:26:40,224 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-03 02:26:40,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:40,231 INFO L225 Difference]: With dead ends: 33 [2022-11-03 02:26:40,231 INFO L226 Difference]: Without dead ends: 31 [2022-11-03 02:26:40,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:26:40,237 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:40,238 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 41 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:26:40,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-03 02:26:40,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-03 02:26:40,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:40,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-11-03 02:26:40,268 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-11-03 02:26:40,268 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:40,269 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-11-03 02:26:40,269 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:40,269 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-11-03 02:26:40,269 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-03 02:26:40,270 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:40,270 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-03 02:26:40,270 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:26:40,271 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:40,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:40,271 INFO L85 PathProgramCache]: Analyzing trace with hash 4583106, now seen corresponding path program 1 times [2022-11-03 02:26:40,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:40,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [365157609] [2022-11-03 02:26:40,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:40,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:40,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:40,561 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:40,562 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:40,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [365157609] [2022-11-03 02:26:40,562 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [365157609] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:40,563 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:40,563 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:26:40,563 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [92633628] [2022-11-03 02:26:40,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:40,565 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:26:40,565 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:40,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:26:40,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:26:40,566 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:40,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:40,608 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-11-03 02:26:40,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:26:40,609 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-03 02:26:40,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:40,610 INFO L225 Difference]: With dead ends: 29 [2022-11-03 02:26:40,610 INFO L226 Difference]: Without dead ends: 29 [2022-11-03 02:26:40,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:26:40,612 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:40,613 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 14 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:40,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-03 02:26:40,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-03 02:26:40,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:40,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-11-03 02:26:40,617 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-11-03 02:26:40,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:40,618 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-11-03 02:26:40,618 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:40,618 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-11-03 02:26:40,619 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-03 02:26:40,619 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:40,619 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-03 02:26:40,619 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:26:40,620 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:40,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:40,620 INFO L85 PathProgramCache]: Analyzing trace with hash 4583107, now seen corresponding path program 1 times [2022-11-03 02:26:40,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:40,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [971763708] [2022-11-03 02:26:40,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:40,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:40,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:41,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:41,035 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:41,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [971763708] [2022-11-03 02:26:41,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [971763708] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:41,035 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:41,036 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:26:41,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [950162657] [2022-11-03 02:26:41,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:41,038 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:26:41,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:41,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:26:41,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:26:41,040 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:41,162 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-11-03 02:26:41,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:26:41,163 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-03 02:26:41,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:41,164 INFO L225 Difference]: With dead ends: 55 [2022-11-03 02:26:41,164 INFO L226 Difference]: Without dead ends: 55 [2022-11-03 02:26:41,164 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:26:41,165 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 87 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:41,166 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 37 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:26:41,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-03 02:26:41,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-11-03 02:26:41,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-03 02:26:41,172 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-11-03 02:26:41,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:41,173 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-03 02:26:41,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,173 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-03 02:26:41,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:26:41,174 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:41,174 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:26:41,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:26:41,175 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:41,176 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:41,177 INFO L85 PathProgramCache]: Analyzing trace with hash 142164286, now seen corresponding path program 1 times [2022-11-03 02:26:41,177 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:41,178 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569093746] [2022-11-03 02:26:41,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:41,178 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:41,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:41,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:41,260 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:41,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569093746] [2022-11-03 02:26:41,271 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569093746] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:41,274 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:41,274 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:26:41,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119792686] [2022-11-03 02:26:41,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:41,275 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:26:41,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:41,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:26:41,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:26:41,276 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:41,304 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-03 02:26:41,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:26:41,305 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:26:41,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:41,305 INFO L225 Difference]: With dead ends: 29 [2022-11-03 02:26:41,305 INFO L226 Difference]: Without dead ends: 29 [2022-11-03 02:26:41,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:26:41,307 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:41,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 14 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:41,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-03 02:26:41,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-03 02:26:41,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-03 02:26:41,311 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-11-03 02:26:41,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:41,311 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-03 02:26:41,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,312 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-03 02:26:41,312 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:26:41,312 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:41,312 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:26:41,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:26:41,313 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:41,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:41,313 INFO L85 PathProgramCache]: Analyzing trace with hash 142164287, now seen corresponding path program 1 times [2022-11-03 02:26:41,313 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:41,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994497010] [2022-11-03 02:26:41,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:41,314 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:41,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:41,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:41,484 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:41,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994497010] [2022-11-03 02:26:41,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1994497010] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:41,485 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:41,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:26:41,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2046550042] [2022-11-03 02:26:41,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:41,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:26:41,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:41,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:26:41,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:26:41,487 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:41,588 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-11-03 02:26:41,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:26:41,588 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:26:41,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:41,589 INFO L225 Difference]: With dead ends: 50 [2022-11-03 02:26:41,589 INFO L226 Difference]: Without dead ends: 50 [2022-11-03 02:26:41,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:26:41,595 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 123 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:41,600 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 30 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:26:41,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-03 02:26:41,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-11-03 02:26:41,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-11-03 02:26:41,607 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-11-03 02:26:41,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:41,607 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-11-03 02:26:41,607 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,607 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-11-03 02:26:41,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:26:41,608 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:41,608 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:26:41,608 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:26:41,608 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:41,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:41,609 INFO L85 PathProgramCache]: Analyzing trace with hash 142166373, now seen corresponding path program 1 times [2022-11-03 02:26:41,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:41,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124524015] [2022-11-03 02:26:41,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:41,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:41,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:41,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:41,700 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:41,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124524015] [2022-11-03 02:26:41,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124524015] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:41,701 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:41,701 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:26:41,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490617469] [2022-11-03 02:26:41,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:41,702 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:26:41,702 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:41,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:26:41,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:26:41,703 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:41,731 INFO L93 Difference]: Finished difference Result 31 states and 35 transitions. [2022-11-03 02:26:41,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:26:41,732 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:26:41,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:41,733 INFO L225 Difference]: With dead ends: 31 [2022-11-03 02:26:41,733 INFO L226 Difference]: Without dead ends: 31 [2022-11-03 02:26:41,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:26:41,736 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 30 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:41,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 41 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:41,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-03 02:26:41,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-03 02:26:41,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.75) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-03 02:26:41,748 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 5 [2022-11-03 02:26:41,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:41,749 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-03 02:26:41,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:41,749 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-03 02:26:41,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-03 02:26:41,750 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:41,750 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-03 02:26:41,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:26:41,750 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:41,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:41,751 INFO L85 PathProgramCache]: Analyzing trace with hash 109470704, now seen corresponding path program 1 times [2022-11-03 02:26:41,751 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:41,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1080803634] [2022-11-03 02:26:41,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:41,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:41,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:42,104 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:42,104 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:42,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1080803634] [2022-11-03 02:26:42,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1080803634] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:42,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [46469263] [2022-11-03 02:26:42,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:42,106 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:42,106 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:42,108 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:42,134 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:26:42,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:42,198 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-03 02:26:42,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:42,361 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:42,369 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:26:42,381 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:26:42,554 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:42,555 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:42,748 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:42,760 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:42,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [46469263] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:42,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1192280848] [2022-11-03 02:26:42,779 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-03 02:26:42,780 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:42,784 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:42,790 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:42,790 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:42,897 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:42,899 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:42,901 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:42,977 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:43,114 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:43,158 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:43,193 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:43,680 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '515#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:43,681 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:43,681 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:43,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-03 02:26:43,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1355436668] [2022-11-03 02:26:43,681 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:43,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:26:43,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:43,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:26:43,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-03 02:26:43,683 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:44,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:44,094 INFO L93 Difference]: Finished difference Result 76 states and 85 transitions. [2022-11-03 02:26:44,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:26:44,094 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-03 02:26:44,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:44,095 INFO L225 Difference]: With dead ends: 76 [2022-11-03 02:26:44,095 INFO L226 Difference]: Without dead ends: 76 [2022-11-03 02:26:44,096 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-03 02:26:44,096 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 225 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:44,097 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 110 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:26:44,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-03 02:26:44,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 27. [2022-11-03 02:26:44,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 26 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:44,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 30 transitions. [2022-11-03 02:26:44,101 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 30 transitions. Word has length 6 [2022-11-03 02:26:44,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:44,102 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 30 transitions. [2022-11-03 02:26:44,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:44,102 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 30 transitions. [2022-11-03 02:26:44,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:26:44,103 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:44,103 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-11-03 02:26:44,146 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-03 02:26:44,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:44,304 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:44,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:44,304 INFO L85 PathProgramCache]: Analyzing trace with hash -819016292, now seen corresponding path program 1 times [2022-11-03 02:26:44,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:44,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [541437681] [2022-11-03 02:26:44,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:44,305 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:44,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:44,507 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:44,507 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:44,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [541437681] [2022-11-03 02:26:44,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [541437681] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:44,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1521096931] [2022-11-03 02:26:44,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:44,508 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:44,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:44,510 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:44,538 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:26:44,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:44,603 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-03 02:26:44,604 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:44,660 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:26:44,660 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:26:44,836 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:44,837 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:45,002 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:45,002 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1521096931] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:45,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1414669276] [2022-11-03 02:26:45,005 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-03 02:26:45,005 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:45,005 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:45,005 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:45,006 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:45,059 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:45,064 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:45,065 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:45,144 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:45,258 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:45,303 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:45,337 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:46,016 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '683#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:46,016 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:46,017 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:46,017 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-03 02:26:46,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [991547106] [2022-11-03 02:26:46,017 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:46,017 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-03 02:26:46,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:46,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-03 02:26:46,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=350, Unknown=0, NotChecked=0, Total=462 [2022-11-03 02:26:46,019 INFO L87 Difference]: Start difference. First operand 27 states and 30 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:46,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:46,299 INFO L93 Difference]: Finished difference Result 46 states and 51 transitions. [2022-11-03 02:26:46,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 02:26:46,299 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:26:46,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:46,300 INFO L225 Difference]: With dead ends: 46 [2022-11-03 02:26:46,300 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 02:26:46,300 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 142 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=156, Invalid=444, Unknown=0, NotChecked=0, Total=600 [2022-11-03 02:26:46,301 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 294 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 294 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:46,301 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [294 Valid, 58 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:26:46,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 02:26:46,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 25. [2022-11-03 02:26:46,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 24 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:46,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 28 transitions. [2022-11-03 02:26:46,304 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 28 transitions. Word has length 7 [2022-11-03 02:26:46,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:46,304 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 28 transitions. [2022-11-03 02:26:46,304 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:46,305 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 28 transitions. [2022-11-03 02:26:46,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-03 02:26:46,305 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:46,305 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:46,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:46,514 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-03 02:26:46,514 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:46,515 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:46,515 INFO L85 PathProgramCache]: Analyzing trace with hash 380363394, now seen corresponding path program 1 times [2022-11-03 02:26:46,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:46,515 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841048900] [2022-11-03 02:26:46,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:46,516 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:46,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:46,821 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:46,821 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:46,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841048900] [2022-11-03 02:26:46,822 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841048900] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:46,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2028684839] [2022-11-03 02:26:46,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:46,822 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:46,823 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:46,831 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:46,855 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:26:46,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:46,902 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-03 02:26:46,906 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:47,049 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:47,049 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:26:47,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2028684839] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:47,049 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:26:47,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2022-11-03 02:26:47,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1944356037] [2022-11-03 02:26:47,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:47,050 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-03 02:26:47,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:47,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-03 02:26:47,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:26:47,052 INFO L87 Difference]: Start difference. First operand 25 states and 28 transitions. Second operand has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:47,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:47,138 INFO L93 Difference]: Finished difference Result 25 states and 28 transitions. [2022-11-03 02:26:47,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:26:47,139 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-03 02:26:47,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:47,139 INFO L225 Difference]: With dead ends: 25 [2022-11-03 02:26:47,139 INFO L226 Difference]: Without dead ends: 25 [2022-11-03 02:26:47,140 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=135, Unknown=0, NotChecked=0, Total=182 [2022-11-03 02:26:47,140 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 64 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:47,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 9 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:47,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2022-11-03 02:26:47,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 24. [2022-11-03 02:26:47,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 17 states have (on average 1.588235294117647) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:47,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-11-03 02:26:47,143 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 8 [2022-11-03 02:26:47,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:47,143 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-11-03 02:26:47,144 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:47,144 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-11-03 02:26:47,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-03 02:26:47,144 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:47,144 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:47,188 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:47,345 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:47,345 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:47,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:47,345 INFO L85 PathProgramCache]: Analyzing trace with hash -1093635206, now seen corresponding path program 1 times [2022-11-03 02:26:47,346 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:47,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1831953504] [2022-11-03 02:26:47,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:47,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:47,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:47,406 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:47,406 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:47,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1831953504] [2022-11-03 02:26:47,406 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1831953504] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:47,407 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:47,407 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:26:47,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2016550009] [2022-11-03 02:26:47,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:47,407 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:26:47,407 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:47,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:26:47,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:26:47,408 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:47,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:47,460 INFO L93 Difference]: Finished difference Result 23 states and 26 transitions. [2022-11-03 02:26:47,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:26:47,461 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-03 02:26:47,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:47,461 INFO L225 Difference]: With dead ends: 23 [2022-11-03 02:26:47,461 INFO L226 Difference]: Without dead ends: 23 [2022-11-03 02:26:47,461 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:26:47,462 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 27 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:47,462 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 11 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:47,463 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2022-11-03 02:26:47,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 23. [2022-11-03 02:26:47,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:47,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-03 02:26:47,465 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 9 [2022-11-03 02:26:47,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:47,465 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-03 02:26:47,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:47,465 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-03 02:26:47,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-03 02:26:47,465 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:47,466 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:47,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-03 02:26:47,466 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:47,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:47,466 INFO L85 PathProgramCache]: Analyzing trace with hash -1093635205, now seen corresponding path program 1 times [2022-11-03 02:26:47,467 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:47,467 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1874938734] [2022-11-03 02:26:47,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:47,467 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:47,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:47,748 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:47,748 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:47,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1874938734] [2022-11-03 02:26:47,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1874938734] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:47,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1310431757] [2022-11-03 02:26:47,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:47,749 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:47,749 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:47,750 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:47,770 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:26:47,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:47,827 INFO L263 TraceCheckSpWp]: Trace formula consists of 109 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-03 02:26:47,829 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:47,844 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:26:47,844 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:26:47,910 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:47,910 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:47,982 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:47,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1310431757] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:47,984 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-03 02:26:47,984 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6, 5] total 12 [2022-11-03 02:26:47,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1478691197] [2022-11-03 02:26:47,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:47,985 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:26:47,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:47,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:26:47,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=108, Unknown=0, NotChecked=0, Total=156 [2022-11-03 02:26:47,986 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:48,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:48,074 INFO L93 Difference]: Finished difference Result 26 states and 29 transitions. [2022-11-03 02:26:48,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:26:48,075 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-03 02:26:48,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:48,075 INFO L225 Difference]: With dead ends: 26 [2022-11-03 02:26:48,076 INFO L226 Difference]: Without dead ends: 26 [2022-11-03 02:26:48,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2022-11-03 02:26:48,077 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 43 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:48,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 17 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:48,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-03 02:26:48,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 24. [2022-11-03 02:26:48,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 18 states have (on average 1.5) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:48,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-11-03 02:26:48,080 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 9 [2022-11-03 02:26:48,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:48,080 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-11-03 02:26:48,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:48,080 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-11-03 02:26:48,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-03 02:26:48,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:48,081 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:48,118 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:48,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-03 02:26:48,302 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:48,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:48,303 INFO L85 PathProgramCache]: Analyzing trace with hash 1283556116, now seen corresponding path program 1 times [2022-11-03 02:26:48,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:48,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [568983170] [2022-11-03 02:26:48,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:48,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:48,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:48,701 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:48,701 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:48,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [568983170] [2022-11-03 02:26:48,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [568983170] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:48,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [566498195] [2022-11-03 02:26:48,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:48,702 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:48,702 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:48,703 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:48,727 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 02:26:48,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:48,784 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-03 02:26:48,788 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:48,957 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:49,010 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:49,012 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:26:49,013 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:26:49,030 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:49,030 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:49,058 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:26:49,062 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:26:49,266 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:49,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [566498195] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:49,267 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1672834367] [2022-11-03 02:26:49,270 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:26:49,270 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:49,270 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:49,271 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:49,271 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:49,334 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:49,336 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:49,337 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:49,409 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:49,488 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:49,532 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:49,641 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:49,723 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:49,724 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:49,828 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:51,294 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1100#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:51,294 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:51,294 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:51,294 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 22 [2022-11-03 02:26:51,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839449234] [2022-11-03 02:26:51,295 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:51,295 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-03 02:26:51,295 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:51,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-03 02:26:51,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=818, Unknown=0, NotChecked=0, Total=930 [2022-11-03 02:26:51,296 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:51,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:51,870 INFO L93 Difference]: Finished difference Result 43 states and 47 transitions. [2022-11-03 02:26:51,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:26:51,871 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-03 02:26:51,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:51,872 INFO L225 Difference]: With dead ends: 43 [2022-11-03 02:26:51,872 INFO L226 Difference]: Without dead ends: 43 [2022-11-03 02:26:51,873 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 283 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=215, Invalid=1267, Unknown=0, NotChecked=0, Total=1482 [2022-11-03 02:26:51,875 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 56 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 225 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 225 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 24 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:51,876 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 97 Invalid, 264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 225 Invalid, 0 Unknown, 24 Unchecked, 0.2s Time] [2022-11-03 02:26:51,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-03 02:26:51,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 30. [2022-11-03 02:26:51,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 24 states have (on average 1.4166666666666667) internal successors, (34), 29 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:51,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 34 transitions. [2022-11-03 02:26:51,880 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 34 transitions. Word has length 11 [2022-11-03 02:26:51,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:51,880 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 34 transitions. [2022-11-03 02:26:51,881 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:51,881 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 34 transitions. [2022-11-03 02:26:51,882 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-03 02:26:51,882 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:51,882 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:51,926 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:52,106 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:52,106 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:52,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:52,107 INFO L85 PathProgramCache]: Analyzing trace with hash 1135532470, now seen corresponding path program 1 times [2022-11-03 02:26:52,107 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:52,107 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1990092638] [2022-11-03 02:26:52,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:52,107 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:52,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:52,180 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:26:52,181 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:52,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1990092638] [2022-11-03 02:26:52,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1990092638] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:52,181 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:52,181 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:26:52,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [944060796] [2022-11-03 02:26:52,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:52,182 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:26:52,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:52,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:26:52,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:26:52,183 INFO L87 Difference]: Start difference. First operand 30 states and 34 transitions. Second operand has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:52,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:52,232 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-03 02:26:52,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:26:52,232 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-03 02:26:52,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:52,233 INFO L225 Difference]: With dead ends: 29 [2022-11-03 02:26:52,233 INFO L226 Difference]: Without dead ends: 29 [2022-11-03 02:26:52,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:26:52,234 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 32 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:52,234 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 17 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:52,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-03 02:26:52,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-03 02:26:52,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.375) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:52,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-03 02:26:52,237 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 12 [2022-11-03 02:26:52,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:52,237 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-03 02:26:52,238 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:52,238 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-03 02:26:52,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-03 02:26:52,238 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:52,238 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:52,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-03 02:26:52,239 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:52,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:52,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1135532471, now seen corresponding path program 1 times [2022-11-03 02:26:52,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:52,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [750585429] [2022-11-03 02:26:52,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:52,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:52,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:52,376 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:26:52,376 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:52,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [750585429] [2022-11-03 02:26:52,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [750585429] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:52,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:52,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:26:52,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648789820] [2022-11-03 02:26:52,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:52,377 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:26:52,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:52,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:26:52,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:26:52,378 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:52,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:52,455 INFO L93 Difference]: Finished difference Result 44 states and 52 transitions. [2022-11-03 02:26:52,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:26:52,456 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-03 02:26:52,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:52,456 INFO L225 Difference]: With dead ends: 44 [2022-11-03 02:26:52,456 INFO L226 Difference]: Without dead ends: 44 [2022-11-03 02:26:52,456 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:26:52,457 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 34 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:52,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 29 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:26:52,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2022-11-03 02:26:52,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 31. [2022-11-03 02:26:52,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 26 states have (on average 1.3461538461538463) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:52,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-03 02:26:52,460 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 12 [2022-11-03 02:26:52,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:52,460 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-03 02:26:52,461 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:52,461 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-03 02:26:52,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:26:52,461 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:52,461 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:52,462 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-03 02:26:52,462 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:52,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:52,462 INFO L85 PathProgramCache]: Analyzing trace with hash -1753115215, now seen corresponding path program 2 times [2022-11-03 02:26:52,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:52,463 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679674664] [2022-11-03 02:26:52,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:52,463 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:52,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:52,651 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:52,652 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:52,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679674664] [2022-11-03 02:26:52,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1679674664] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:52,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1865500471] [2022-11-03 02:26:52,652 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:26:52,653 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:52,653 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:52,654 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:52,674 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-03 02:26:52,744 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:26:52,745 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:26:52,746 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-03 02:26:52,749 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:52,773 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:26:52,774 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:26:52,914 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:26:52,959 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:26:52,962 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 17 [2022-11-03 02:26:53,018 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:26:53,019 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:53,108 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:26:53,114 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:26:53,392 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:26:53,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1865500471] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:53,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [344524741] [2022-11-03 02:26:53,398 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:26:53,398 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:53,400 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:53,400 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:53,400 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:53,442 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:53,445 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:53,447 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:53,508 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:53,571 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:53,597 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:53,655 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:53,723 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:53,723 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:53,855 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:55,312 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1444#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:55,313 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:55,313 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:55,313 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 21 [2022-11-03 02:26:55,313 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771468850] [2022-11-03 02:26:55,313 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:55,314 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-03 02:26:55,314 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:55,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-03 02:26:55,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=128, Invalid=802, Unknown=0, NotChecked=0, Total=930 [2022-11-03 02:26:55,315 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 22 states, 21 states have (on average 1.6666666666666667) internal successors, (35), 22 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:55,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:55,849 INFO L93 Difference]: Finished difference Result 46 states and 52 transitions. [2022-11-03 02:26:55,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-03 02:26:55,850 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 1.6666666666666667) internal successors, (35), 22 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:26:55,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:55,851 INFO L225 Difference]: With dead ends: 46 [2022-11-03 02:26:55,851 INFO L226 Difference]: Without dead ends: 46 [2022-11-03 02:26:55,852 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 299 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=257, Invalid=1303, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:26:55,852 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 57 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 33 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:55,853 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 119 Invalid, 321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 276 Invalid, 0 Unknown, 33 Unchecked, 0.2s Time] [2022-11-03 02:26:55,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-03 02:26:55,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 33. [2022-11-03 02:26:55,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:55,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-03 02:26:55,855 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 13 [2022-11-03 02:26:55,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:55,856 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-03 02:26:55,856 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 1.6666666666666667) internal successors, (35), 22 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:55,856 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-03 02:26:55,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:26:55,857 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:55,857 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:55,887 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:56,070 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:56,070 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:56,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:56,071 INFO L85 PathProgramCache]: Analyzing trace with hash 841768262, now seen corresponding path program 1 times [2022-11-03 02:26:56,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:56,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1552954533] [2022-11-03 02:26:56,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:56,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:56,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:56,114 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:26:56,115 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:56,115 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1552954533] [2022-11-03 02:26:56,115 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1552954533] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:56,115 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:26:56,115 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:26:56,116 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466173642] [2022-11-03 02:26:56,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:56,116 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:26:56,116 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:56,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:26:56,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:26:56,117 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:56,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:56,155 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-03 02:26:56,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:26:56,156 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:26:56,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:56,157 INFO L225 Difference]: With dead ends: 32 [2022-11-03 02:26:56,157 INFO L226 Difference]: Without dead ends: 32 [2022-11-03 02:26:56,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:26:56,158 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:56,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 14 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:26:56,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-03 02:26:56,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-03 02:26:56,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:56,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-03 02:26:56,160 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 13 [2022-11-03 02:26:56,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:56,161 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-03 02:26:56,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 4.333333333333333) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:56,161 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-03 02:26:56,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:26:56,163 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:56,163 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:56,163 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-03 02:26:56,163 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:56,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:56,164 INFO L85 PathProgramCache]: Analyzing trace with hash 841768263, now seen corresponding path program 1 times [2022-11-03 02:26:56,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:56,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [175775064] [2022-11-03 02:26:56,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:56,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:56,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:56,369 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:56,369 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:56,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [175775064] [2022-11-03 02:26:56,370 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [175775064] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:56,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [226277975] [2022-11-03 02:26:56,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:56,370 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:56,370 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:56,371 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:56,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-03 02:26:56,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:56,458 INFO L263 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-03 02:26:56,459 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:56,472 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:26:56,472 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:26:56,542 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:56,543 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:56,633 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:56,633 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [226277975] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:56,634 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [802620231] [2022-11-03 02:26:56,635 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-03 02:26:56,636 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:56,636 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:56,636 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:56,636 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:56,695 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:56,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:56,703 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:56,763 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:56,846 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:56,875 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:56,947 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:57,010 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:57,011 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:57,139 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:59,732 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [802620231] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:26:59,732 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:59,732 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 6, 6] total 24 [2022-11-03 02:26:59,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [131335636] [2022-11-03 02:26:59,733 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:26:59,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:26:59,734 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:59,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:26:59,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=457, Unknown=0, NotChecked=0, Total=600 [2022-11-03 02:26:59,735 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:02,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:02,876 INFO L93 Difference]: Finished difference Result 68 states and 78 transitions. [2022-11-03 02:27:02,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:27:02,879 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:27:02,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:02,879 INFO L225 Difference]: With dead ends: 68 [2022-11-03 02:27:02,879 INFO L226 Difference]: Without dead ends: 57 [2022-11-03 02:27:02,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 19 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 229 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=297, Invalid=825, Unknown=0, NotChecked=0, Total=1122 [2022-11-03 02:27:02,881 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 64 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:02,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 38 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:27:02,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-03 02:27:02,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 51. [2022-11-03 02:27:02,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3191489361702127) internal successors, (62), 50 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:02,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 62 transitions. [2022-11-03 02:27:02,884 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 62 transitions. Word has length 13 [2022-11-03 02:27:02,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:02,884 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 62 transitions. [2022-11-03 02:27:02,884 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:02,885 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 62 transitions. [2022-11-03 02:27:02,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:27:02,885 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:02,885 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:02,921 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:03,100 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-03 02:27:03,101 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:03,101 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:03,101 INFO L85 PathProgramCache]: Analyzing trace with hash -1249350982, now seen corresponding path program 1 times [2022-11-03 02:27:03,101 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:03,101 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [838642372] [2022-11-03 02:27:03,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:03,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:03,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:03,252 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:03,253 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:03,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [838642372] [2022-11-03 02:27:03,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [838642372] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:03,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2056343979] [2022-11-03 02:27:03,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:03,254 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:03,254 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:03,255 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:03,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-03 02:27:03,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:03,344 INFO L263 TraceCheckSpWp]: Trace formula consists of 152 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 02:27:03,346 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:03,450 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:03,450 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:03,570 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:03,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2056343979] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:03,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2016196527] [2022-11-03 02:27:03,573 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:27:03,574 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:03,575 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:03,575 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:03,575 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:03,627 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:03,629 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:03,630 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:03,689 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:03,737 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:03,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:03,827 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:03,878 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:03,923 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:03,946 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:03,995 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:04,049 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:04,050 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:04,167 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:06,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2016196527] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:27:06,980 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:06,980 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 7, 7] total 30 [2022-11-03 02:27:06,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179715759] [2022-11-03 02:27:06,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:27:06,981 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:27:06,981 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:06,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:27:06,982 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-11-03 02:27:06,982 INFO L87 Difference]: Start difference. First operand 51 states and 62 transitions. Second operand has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:07,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:07,184 INFO L93 Difference]: Finished difference Result 62 states and 75 transitions. [2022-11-03 02:27:07,184 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:27:07,184 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:27:07,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:07,185 INFO L225 Difference]: With dead ends: 62 [2022-11-03 02:27:07,185 INFO L226 Difference]: Without dead ends: 62 [2022-11-03 02:27:07,186 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 22 SyntacticMatches, 1 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-11-03 02:27:07,186 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 37 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:07,187 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:27:07,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-03 02:27:07,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 54. [2022-11-03 02:27:07,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.3) internal successors, (65), 53 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:07,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 65 transitions. [2022-11-03 02:27:07,190 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 65 transitions. Word has length 15 [2022-11-03 02:27:07,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:07,190 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 65 transitions. [2022-11-03 02:27:07,190 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:07,190 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 65 transitions. [2022-11-03 02:27:07,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:27:07,191 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:07,191 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:07,222 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:07,414 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-03 02:27:07,414 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:07,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:07,415 INFO L85 PathProgramCache]: Analyzing trace with hash -1116540982, now seen corresponding path program 3 times [2022-11-03 02:27:07,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:07,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379542656] [2022-11-03 02:27:07,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:07,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:07,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:07,838 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:07,838 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:07,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379542656] [2022-11-03 02:27:07,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379542656] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:07,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [113760842] [2022-11-03 02:27:07,838 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:27:07,839 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:07,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:07,843 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:07,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-03 02:27:07,940 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:27:07,940 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:07,942 INFO L263 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-03 02:27:07,943 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:08,161 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:27:08,343 INFO L356 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-03 02:27:08,344 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 18 [2022-11-03 02:27:08,369 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:08,369 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:08,472 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-03 02:27:08,477 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-03 02:27:08,829 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:08,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [113760842] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:08,830 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [613408340] [2022-11-03 02:27:08,831 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:27:08,832 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:08,832 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:08,832 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:08,832 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:08,876 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:08,878 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:08,879 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:08,947 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:09,003 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:09,028 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:09,088 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:09,155 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:09,156 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:09,238 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:10,703 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2198#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:10,704 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:10,704 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:10,704 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 12] total 30 [2022-11-03 02:27:10,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352180181] [2022-11-03 02:27:10,704 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:10,705 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-03 02:27:10,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:10,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-03 02:27:10,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=1347, Unknown=0, NotChecked=0, Total=1482 [2022-11-03 02:27:10,706 INFO L87 Difference]: Start difference. First operand 54 states and 65 transitions. Second operand has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:12,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:12,309 INFO L93 Difference]: Finished difference Result 94 states and 113 transitions. [2022-11-03 02:27:12,310 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-03 02:27:12,310 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:27:12,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:12,310 INFO L225 Difference]: With dead ends: 94 [2022-11-03 02:27:12,311 INFO L226 Difference]: Without dead ends: 94 [2022-11-03 02:27:12,311 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 568 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=378, Invalid=2814, Unknown=0, NotChecked=0, Total=3192 [2022-11-03 02:27:12,312 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 108 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 69 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:12,312 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 160 Invalid, 434 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 339 Invalid, 0 Unknown, 69 Unchecked, 0.3s Time] [2022-11-03 02:27:12,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-03 02:27:12,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 74. [2022-11-03 02:27:12,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 70 states have (on average 1.2857142857142858) internal successors, (90), 73 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:12,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 90 transitions. [2022-11-03 02:27:12,315 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 90 transitions. Word has length 15 [2022-11-03 02:27:12,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:12,315 INFO L495 AbstractCegarLoop]: Abstraction has 74 states and 90 transitions. [2022-11-03 02:27:12,316 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:12,316 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 90 transitions. [2022-11-03 02:27:12,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:27:12,316 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:12,316 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:12,366 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:12,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:12,534 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:12,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:12,535 INFO L85 PathProgramCache]: Analyzing trace with hash 745895037, now seen corresponding path program 1 times [2022-11-03 02:27:12,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:12,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [523474061] [2022-11-03 02:27:12,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:12,536 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:12,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:12,766 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:27:12,766 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:12,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [523474061] [2022-11-03 02:27:12,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [523474061] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:12,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [505045525] [2022-11-03 02:27:12,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:12,767 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:12,767 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:12,768 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:12,775 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-03 02:27:12,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:12,862 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:27:12,863 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:12,969 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:12,969 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:13,102 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-03 02:27:13,122 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:13,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [505045525] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:13,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1275826735] [2022-11-03 02:27:13,124 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-03 02:27:13,125 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:13,125 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:13,125 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:13,125 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:13,167 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:13,169 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:13,170 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:13,224 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:13,279 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:13,302 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:13,351 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:13,399 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:13,399 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:13,530 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:15,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1275826735] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:27:15,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:15,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [7, 8, 8] total 28 [2022-11-03 02:27:15,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706787905] [2022-11-03 02:27:15,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:27:15,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:27:15,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:15,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:27:15,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=697, Unknown=0, NotChecked=0, Total=812 [2022-11-03 02:27:15,134 INFO L87 Difference]: Start difference. First operand 74 states and 90 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:18,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:18,713 INFO L93 Difference]: Finished difference Result 79 states and 92 transitions. [2022-11-03 02:27:18,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:27:18,714 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-03 02:27:18,714 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:18,714 INFO L225 Difference]: With dead ends: 79 [2022-11-03 02:27:18,714 INFO L226 Difference]: Without dead ends: 79 [2022-11-03 02:27:18,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 27 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=253, Invalid=1153, Unknown=0, NotChecked=0, Total=1406 [2022-11-03 02:27:18,715 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 32 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:18,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 74 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:27:18,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-03 02:27:18,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 75. [2022-11-03 02:27:18,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.2816901408450705) internal successors, (91), 74 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:18,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 91 transitions. [2022-11-03 02:27:18,719 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 91 transitions. Word has length 17 [2022-11-03 02:27:18,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:18,720 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 91 transitions. [2022-11-03 02:27:18,720 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:18,720 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 91 transitions. [2022-11-03 02:27:18,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:27:18,721 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:18,721 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:18,745 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:18,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:18,930 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:18,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:18,931 INFO L85 PathProgramCache]: Analyzing trace with hash 771518764, now seen corresponding path program 1 times [2022-11-03 02:27:18,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:18,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870499370] [2022-11-03 02:27:18,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:18,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:18,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:19,068 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:27:19,069 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:19,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870499370] [2022-11-03 02:27:19,069 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870499370] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:19,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [34872500] [2022-11-03 02:27:19,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:19,070 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:19,070 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:19,071 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:19,094 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-03 02:27:19,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:19,169 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 02:27:19,170 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:19,268 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:27:19,268 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:19,376 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:27:19,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [34872500] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:19,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [261155865] [2022-11-03 02:27:19,378 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:27:19,378 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:19,378 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:19,378 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:19,379 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:19,427 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:19,430 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:19,431 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:19,479 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,532 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,556 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,618 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:19,668 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,707 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,731 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,777 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:19,835 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:19,835 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:19,955 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:27:20,015 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:27:20,016 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:27:20,141 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:20,142 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:20,269 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:20,270 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:20,333 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:23,049 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2828#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:23,049 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:23,049 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:23,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 18 [2022-11-03 02:27:23,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111294368] [2022-11-03 02:27:23,050 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:23,050 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-03 02:27:23,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:23,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-03 02:27:23,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=844, Unknown=0, NotChecked=0, Total=992 [2022-11-03 02:27:23,052 INFO L87 Difference]: Start difference. First operand 75 states and 91 transitions. Second operand has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:23,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:23,311 INFO L93 Difference]: Finished difference Result 77 states and 89 transitions. [2022-11-03 02:27:23,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-03 02:27:23,319 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-03 02:27:23,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:23,320 INFO L225 Difference]: With dead ends: 77 [2022-11-03 02:27:23,320 INFO L226 Difference]: Without dead ends: 75 [2022-11-03 02:27:23,321 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 424 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=225, Invalid=1257, Unknown=0, NotChecked=0, Total=1482 [2022-11-03 02:27:23,322 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 73 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:23,323 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 143 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:27:23,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-03 02:27:23,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-11-03 02:27:23,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2835820895522387) internal successors, (86), 70 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:23,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 86 transitions. [2022-11-03 02:27:23,330 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 86 transitions. Word has length 18 [2022-11-03 02:27:23,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:23,331 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 86 transitions. [2022-11-03 02:27:23,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:23,331 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 86 transitions. [2022-11-03 02:27:23,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-03 02:27:23,332 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:23,332 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:23,355 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:23,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-11-03 02:27:23,538 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:23,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:23,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1599574128, now seen corresponding path program 1 times [2022-11-03 02:27:23,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:23,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [823815805] [2022-11-03 02:27:23,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:23,539 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:23,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:23,760 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:27:23,760 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:23,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [823815805] [2022-11-03 02:27:23,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [823815805] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:23,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [16437500] [2022-11-03 02:27:23,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:23,761 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:23,761 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:23,763 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:23,782 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-03 02:27:23,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:23,876 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-03 02:27:23,877 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:23,894 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:27:23,895 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:27:23,978 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:27:23,978 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:24,148 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:27:24,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [16437500] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:24,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [154260008] [2022-11-03 02:27:24,151 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:27:24,151 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:24,151 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:24,152 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:24,152 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:24,193 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:24,196 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:24,196 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:24,241 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:24,285 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:24,307 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:24,372 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:24,420 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:24,463 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:24,487 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:24,535 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:24,590 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:24,590 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:24,711 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:26,323 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [154260008] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:27:26,323 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:26,323 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 8, 8] total 32 [2022-11-03 02:27:26,323 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [764427029] [2022-11-03 02:27:26,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:27:26,324 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:27:26,324 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:26,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:27:26,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=886, Unknown=0, NotChecked=0, Total=1056 [2022-11-03 02:27:26,325 INFO L87 Difference]: Start difference. First operand 71 states and 86 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:28,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:28,049 INFO L93 Difference]: Finished difference Result 72 states and 87 transitions. [2022-11-03 02:27:28,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:27:28,050 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-03 02:27:28,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:28,051 INFO L225 Difference]: With dead ends: 72 [2022-11-03 02:27:28,051 INFO L226 Difference]: Without dead ends: 72 [2022-11-03 02:27:28,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 383 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=245, Invalid=1161, Unknown=0, NotChecked=0, Total=1406 [2022-11-03 02:27:28,052 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 23 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:28,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 27 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:27:28,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-11-03 02:27:28,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 69. [2022-11-03 02:27:28,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 65 states have (on average 1.2923076923076924) internal successors, (84), 68 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:28,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 84 transitions. [2022-11-03 02:27:28,055 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 84 transitions. Word has length 19 [2022-11-03 02:27:28,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:28,056 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 84 transitions. [2022-11-03 02:27:28,056 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:28,056 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 84 transitions. [2022-11-03 02:27:28,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-03 02:27:28,057 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:28,057 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:28,083 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:28,266 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:28,266 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:28,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:28,267 INFO L85 PathProgramCache]: Analyzing trace with hash -657256320, now seen corresponding path program 4 times [2022-11-03 02:27:28,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:28,267 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525065730] [2022-11-03 02:27:28,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:28,267 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:28,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:28,754 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:28,754 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:28,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525065730] [2022-11-03 02:27:28,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525065730] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:28,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1142875001] [2022-11-03 02:27:28,755 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:27:28,755 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:28,755 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:28,756 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:28,773 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-03 02:27:28,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:28,857 INFO L263 TraceCheckSpWp]: Trace formula consists of 168 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-03 02:27:28,859 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:29,187 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:27:29,464 INFO L356 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-03 02:27:29,464 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-03 02:27:29,493 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 3 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:29,493 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:29,701 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-03 02:27:29,705 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-03 02:27:30,198 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 9 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:30,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1142875001] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:30,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1804255825] [2022-11-03 02:27:30,200 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:27:30,200 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:30,200 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:30,200 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:30,201 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:30,241 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:30,244 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:30,247 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:30,294 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:30,360 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:30,390 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:30,437 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:30,489 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:30,490 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:30,586 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:32,174 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3443#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:32,174 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:32,175 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:32,175 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 15] total 39 [2022-11-03 02:27:32,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1969491927] [2022-11-03 02:27:32,175 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:32,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-03 02:27:32,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:32,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-03 02:27:32,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=2058, Unknown=0, NotChecked=0, Total=2256 [2022-11-03 02:27:32,177 INFO L87 Difference]: Start difference. First operand 69 states and 84 transitions. Second operand has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:34,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:34,236 INFO L93 Difference]: Finished difference Result 112 states and 136 transitions. [2022-11-03 02:27:34,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-03 02:27:34,237 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-03 02:27:34,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:34,239 INFO L225 Difference]: With dead ends: 112 [2022-11-03 02:27:34,239 INFO L226 Difference]: Without dead ends: 112 [2022-11-03 02:27:34,240 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1012 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=509, Invalid=4183, Unknown=0, NotChecked=0, Total=4692 [2022-11-03 02:27:34,241 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 102 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 598 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 677 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 598 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 42 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:34,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 218 Invalid, 677 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 598 Invalid, 0 Unknown, 42 Unchecked, 0.5s Time] [2022-11-03 02:27:34,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2022-11-03 02:27:34,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 87. [2022-11-03 02:27:34,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 83 states have (on average 1.3012048192771084) internal successors, (108), 86 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:34,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 108 transitions. [2022-11-03 02:27:34,245 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 108 transitions. Word has length 19 [2022-11-03 02:27:34,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:34,245 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 108 transitions. [2022-11-03 02:27:34,245 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:34,245 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 108 transitions. [2022-11-03 02:27:34,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:27:34,246 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:34,246 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:34,288 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:34,450 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:34,450 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:34,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:34,450 INFO L85 PathProgramCache]: Analyzing trace with hash 977322351, now seen corresponding path program 2 times [2022-11-03 02:27:34,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:34,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1946689519] [2022-11-03 02:27:34,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:34,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:34,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:34,716 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:27:34,716 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:34,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1946689519] [2022-11-03 02:27:34,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1946689519] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:34,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [555488309] [2022-11-03 02:27:34,717 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:27:34,717 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:34,717 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:34,719 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:34,754 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-03 02:27:34,856 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:27:34,856 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:34,858 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:27:34,859 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:34,971 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:27:34,971 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:35,107 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:27:35,137 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:27:35,137 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [555488309] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:35,137 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [704512689] [2022-11-03 02:27:35,139 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:27:35,139 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:35,139 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:35,139 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:35,140 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:35,180 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:35,182 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:35,183 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:35,226 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,272 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,295 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,356 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,404 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,437 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,464 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,516 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:35,571 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:35,572 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:35,662 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:27:35,710 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:27:35,711 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:27:35,836 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:35,836 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:35,963 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:35,963 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:36,023 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:38,961 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3827#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:38,962 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:38,962 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:38,962 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-11-03 02:27:38,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1898878347] [2022-11-03 02:27:38,962 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:38,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-03 02:27:38,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:38,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-03 02:27:38,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=977, Unknown=0, NotChecked=0, Total=1122 [2022-11-03 02:27:38,964 INFO L87 Difference]: Start difference. First operand 87 states and 108 transitions. Second operand has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:39,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:39,378 INFO L93 Difference]: Finished difference Result 100 states and 119 transitions. [2022-11-03 02:27:39,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 02:27:39,378 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-03 02:27:39,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:39,380 INFO L225 Difference]: With dead ends: 100 [2022-11-03 02:27:39,380 INFO L226 Difference]: Without dead ends: 100 [2022-11-03 02:27:39,381 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 33 SyntacticMatches, 2 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 410 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=235, Invalid=1487, Unknown=0, NotChecked=0, Total=1722 [2022-11-03 02:27:39,381 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 127 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 318 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 318 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:39,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 108 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 318 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:27:39,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-11-03 02:27:39,386 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 90. [2022-11-03 02:27:39,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 86 states have (on average 1.302325581395349) internal successors, (112), 89 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:39,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 112 transitions. [2022-11-03 02:27:39,387 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 112 transitions. Word has length 20 [2022-11-03 02:27:39,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:39,387 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 112 transitions. [2022-11-03 02:27:39,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:39,387 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 112 transitions. [2022-11-03 02:27:39,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:27:39,391 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:39,392 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:39,418 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:39,602 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-03 02:27:39,603 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:39,603 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:39,603 INFO L85 PathProgramCache]: Analyzing trace with hash 977321313, now seen corresponding path program 1 times [2022-11-03 02:27:39,603 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:39,603 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109396434] [2022-11-03 02:27:39,603 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:39,603 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:39,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:39,741 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 02:27:39,741 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:39,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109396434] [2022-11-03 02:27:39,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [109396434] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:27:39,742 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:27:39,742 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:27:39,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912774404] [2022-11-03 02:27:39,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:27:39,743 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:27:39,743 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:39,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:27:39,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:27:39,744 INFO L87 Difference]: Start difference. First operand 90 states and 112 transitions. Second operand has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:39,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:39,768 INFO L93 Difference]: Finished difference Result 89 states and 111 transitions. [2022-11-03 02:27:39,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:27:39,769 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-03 02:27:39,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:39,770 INFO L225 Difference]: With dead ends: 89 [2022-11-03 02:27:39,770 INFO L226 Difference]: Without dead ends: 87 [2022-11-03 02:27:39,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:27:39,772 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 5 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:39,773 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:27:39,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-11-03 02:27:39,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 83. [2022-11-03 02:27:39,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 80 states have (on average 1.275) internal successors, (102), 82 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:39,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 102 transitions. [2022-11-03 02:27:39,776 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 102 transitions. Word has length 20 [2022-11-03 02:27:39,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:39,777 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 102 transitions. [2022-11-03 02:27:39,777 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:39,778 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 102 transitions. [2022-11-03 02:27:39,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:27:39,778 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:39,778 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:39,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-11-03 02:27:39,779 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:39,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:39,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1201705847, now seen corresponding path program 1 times [2022-11-03 02:27:39,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:39,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [553784353] [2022-11-03 02:27:39,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:39,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:39,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:40,067 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:27:40,067 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:40,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [553784353] [2022-11-03 02:27:40,068 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [553784353] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:27:40,068 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:27:40,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 02:27:40,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [932949935] [2022-11-03 02:27:40,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:27:40,068 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:27:40,069 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:40,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:27:40,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:27:40,070 INFO L87 Difference]: Start difference. First operand 83 states and 102 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:40,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:40,258 INFO L93 Difference]: Finished difference Result 86 states and 103 transitions. [2022-11-03 02:27:40,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:27:40,259 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-03 02:27:40,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:40,259 INFO L225 Difference]: With dead ends: 86 [2022-11-03 02:27:40,259 INFO L226 Difference]: Without dead ends: 70 [2022-11-03 02:27:40,260 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:27:40,260 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 24 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:40,260 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 55 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:27:40,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-03 02:27:40,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 68. [2022-11-03 02:27:40,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2461538461538462) internal successors, (81), 67 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:40,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 81 transitions. [2022-11-03 02:27:40,262 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 81 transitions. Word has length 20 [2022-11-03 02:27:40,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:40,263 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 81 transitions. [2022-11-03 02:27:40,263 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:40,263 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 81 transitions. [2022-11-03 02:27:40,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 02:27:40,263 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:40,263 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:40,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-11-03 02:27:40,264 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:40,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:40,264 INFO L85 PathProgramCache]: Analyzing trace with hash 232221839, now seen corresponding path program 1 times [2022-11-03 02:27:40,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:40,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [196313210] [2022-11-03 02:27:40,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:40,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:40,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:40,575 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:27:40,575 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:40,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [196313210] [2022-11-03 02:27:40,576 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [196313210] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:40,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [448212638] [2022-11-03 02:27:40,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:40,576 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:40,576 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:40,581 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:40,608 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-03 02:27:40,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:40,694 INFO L263 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-03 02:27:40,696 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:40,707 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:27:40,707 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:27:40,810 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:27:40,810 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:41,019 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:27:41,019 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [448212638] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:41,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1386151466] [2022-11-03 02:27:41,021 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:27:41,021 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:41,021 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:41,022 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:41,022 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:41,061 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:41,063 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:41,064 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:41,104 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:41,147 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:41,177 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:41,231 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:41,284 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:41,318 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:41,345 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:41,385 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:41,436 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:41,436 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:41,566 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:27:41,619 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:27:41,620 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:27:41,755 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:41,756 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:41,862 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:41,862 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:41,919 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:44,686 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4536#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:44,686 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:44,686 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:44,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 22 [2022-11-03 02:27:44,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318065087] [2022-11-03 02:27:44,686 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:44,687 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:27:44,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:44,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:27:44,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=1145, Unknown=0, NotChecked=0, Total=1332 [2022-11-03 02:27:44,688 INFO L87 Difference]: Start difference. First operand 68 states and 81 transitions. Second operand has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:45,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:45,055 INFO L93 Difference]: Finished difference Result 84 states and 98 transitions. [2022-11-03 02:27:45,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 02:27:45,056 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-03 02:27:45,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:45,057 INFO L225 Difference]: With dead ends: 84 [2022-11-03 02:27:45,057 INFO L226 Difference]: Without dead ends: 84 [2022-11-03 02:27:45,058 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 517 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=302, Invalid=1590, Unknown=0, NotChecked=0, Total=1892 [2022-11-03 02:27:45,058 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 63 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 238 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 238 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:45,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 38 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 238 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:27:45,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-03 02:27:45,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 77. [2022-11-03 02:27:45,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 74 states have (on average 1.2297297297297298) internal successors, (91), 76 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:45,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 91 transitions. [2022-11-03 02:27:45,061 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 91 transitions. Word has length 21 [2022-11-03 02:27:45,061 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:45,062 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 91 transitions. [2022-11-03 02:27:45,062 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:45,062 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 91 transitions. [2022-11-03 02:27:45,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 02:27:45,063 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:45,063 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:45,093 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:45,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-03 02:27:45,282 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:45,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:45,283 INFO L85 PathProgramCache]: Analyzing trace with hash -817164504, now seen corresponding path program 1 times [2022-11-03 02:27:45,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:45,283 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615076430] [2022-11-03 02:27:45,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:45,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:45,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:46,015 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:46,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:46,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615076430] [2022-11-03 02:27:46,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615076430] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:46,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [274961564] [2022-11-03 02:27:46,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:46,016 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:46,016 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:46,017 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:46,046 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-03 02:27:46,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:46,142 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-03 02:27:46,147 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:46,330 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:46,373 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:27:46,374 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:27:46,375 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:27:46,395 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:27:46,395 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:46,425 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:27:46,428 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:27:46,669 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 3 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:27:46,670 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [274961564] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:46,670 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1964600462] [2022-11-03 02:27:46,671 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:27:46,671 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:46,672 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:46,672 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:46,672 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:46,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:46,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:46,722 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:46,761 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:46,812 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:46,834 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:46,894 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:46,935 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:46,979 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:47,005 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:47,047 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:47,097 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:47,097 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:47,234 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:27:47,235 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:27:47,320 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:47,321 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:47,427 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:27:47,427 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:27:47,484 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:50,451 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4885#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:50,451 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:50,451 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:50,451 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 10] total 28 [2022-11-03 02:27:50,451 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748161789] [2022-11-03 02:27:50,451 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:50,452 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-03 02:27:50,452 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:50,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-03 02:27:50,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=1552, Unknown=0, NotChecked=0, Total=1722 [2022-11-03 02:27:50,453 INFO L87 Difference]: Start difference. First operand 77 states and 91 transitions. Second operand has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:51,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:51,718 INFO L93 Difference]: Finished difference Result 92 states and 104 transitions. [2022-11-03 02:27:51,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-03 02:27:51,719 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-03 02:27:51,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:51,719 INFO L225 Difference]: With dead ends: 92 [2022-11-03 02:27:51,720 INFO L226 Difference]: Without dead ends: 92 [2022-11-03 02:27:51,721 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 596 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=304, Invalid=2452, Unknown=0, NotChecked=0, Total=2756 [2022-11-03 02:27:51,721 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 89 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 381 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 449 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 381 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 32 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:51,722 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 60 Invalid, 449 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 381 Invalid, 0 Unknown, 32 Unchecked, 0.3s Time] [2022-11-03 02:27:51,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-03 02:27:51,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 87. [2022-11-03 02:27:51,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 84 states have (on average 1.2023809523809523) internal successors, (101), 86 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:51,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 101 transitions. [2022-11-03 02:27:51,725 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 101 transitions. Word has length 23 [2022-11-03 02:27:51,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:51,725 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 101 transitions. [2022-11-03 02:27:51,725 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:51,725 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 101 transitions. [2022-11-03 02:27:51,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 02:27:51,726 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:51,726 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:51,749 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:51,930 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-03 02:27:51,930 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:51,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:51,931 INFO L85 PathProgramCache]: Analyzing trace with hash -534502090, now seen corresponding path program 5 times [2022-11-03 02:27:51,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:51,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022285510] [2022-11-03 02:27:51,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:51,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:51,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:52,508 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:52,509 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:52,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022285510] [2022-11-03 02:27:52,509 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022285510] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:52,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1179194084] [2022-11-03 02:27:52,509 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:27:52,509 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:52,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:52,511 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:52,530 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-03 02:27:52,687 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:27:52,687 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:52,689 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-03 02:27:52,690 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:52,952 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:53,410 INFO L356 Elim1Store]: treesize reduction 17, result has 48.5 percent of original size [2022-11-03 02:27:53,410 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 48 treesize of output 34 [2022-11-03 02:27:53,443 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:53,443 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:53,757 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-11-03 02:27:53,763 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 45 [2022-11-03 02:27:54,394 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:54,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1179194084] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:54,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [5059278] [2022-11-03 02:27:54,396 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:27:54,396 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:54,397 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:54,397 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:54,397 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:54,433 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:54,437 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:54,438 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:54,482 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:54,529 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:54,552 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:54,600 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:54,662 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:54,662 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:54,722 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:56,318 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5278#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:56,319 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:56,319 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:56,319 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 46 [2022-11-03 02:27:56,319 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1588781258] [2022-11-03 02:27:56,319 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:56,320 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-03 02:27:56,320 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:56,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-03 02:27:56,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=2730, Unknown=0, NotChecked=0, Total=2970 [2022-11-03 02:27:56,321 INFO L87 Difference]: Start difference. First operand 87 states and 101 transitions. Second operand has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:58,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:58,496 INFO L93 Difference]: Finished difference Result 125 states and 145 transitions. [2022-11-03 02:27:58,496 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-03 02:27:58,497 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-03 02:27:58,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:58,497 INFO L225 Difference]: With dead ends: 125 [2022-11-03 02:27:58,498 INFO L226 Difference]: Without dead ends: 115 [2022-11-03 02:27:58,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1596 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=659, Invalid=5983, Unknown=0, NotChecked=0, Total=6642 [2022-11-03 02:27:58,501 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 106 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 615 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 731 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 81 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:58,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 122 Invalid, 731 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 615 Invalid, 0 Unknown, 81 Unchecked, 0.4s Time] [2022-11-03 02:27:58,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2022-11-03 02:27:58,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 101. [2022-11-03 02:27:58,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 98 states have (on average 1.2142857142857142) internal successors, (119), 100 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:58,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 119 transitions. [2022-11-03 02:27:58,505 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 119 transitions. Word has length 23 [2022-11-03 02:27:58,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:58,505 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 119 transitions. [2022-11-03 02:27:58,505 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:58,505 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 119 transitions. [2022-11-03 02:27:58,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-03 02:27:58,506 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:58,506 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:58,530 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:58,714 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-03 02:27:58,714 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:58,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:58,715 INFO L85 PathProgramCache]: Analyzing trace with hash -1071471817, now seen corresponding path program 3 times [2022-11-03 02:27:58,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:58,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746839518] [2022-11-03 02:27:58,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:58,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:58,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:59,467 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:27:59,467 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:59,467 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746839518] [2022-11-03 02:27:59,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746839518] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:59,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2071038204] [2022-11-03 02:27:59,468 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:27:59,468 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:59,468 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:59,469 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:59,486 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-03 02:27:59,609 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:27:59,609 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:59,612 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-03 02:27:59,626 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:59,635 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:27:59,821 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:59,883 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:28:00,022 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:28:00,078 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:28:00,082 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 8 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:28:00,082 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:00,132 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_616) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:28:00,141 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_616) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:28:00,152 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_616) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:28:00,158 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:00,159 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:28:00,166 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:00,166 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:28:00,169 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:28:00,336 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 3 not checked. [2022-11-03 02:28:00,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2071038204] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:00,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [238704532] [2022-11-03 02:28:00,338 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:00,338 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:00,338 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:00,338 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:00,339 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:00,381 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:00,383 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:00,384 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:00,421 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,474 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,499 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,585 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:00,634 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,670 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,694 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,741 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:00,794 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:00,794 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:00,929 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:28:00,933 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:28:00,989 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:28:00,990 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:28:01,127 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:01,127 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:01,230 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:01,231 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:01,286 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:04,362 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5738#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:04,363 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:04,363 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:04,363 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 13, 12] total 33 [2022-11-03 02:28:04,363 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819004570] [2022-11-03 02:28:04,363 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:04,364 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-03 02:28:04,364 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:04,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-03 02:28:04,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=1721, Unknown=3, NotChecked=258, Total=2162 [2022-11-03 02:28:04,365 INFO L87 Difference]: Start difference. First operand 101 states and 119 transitions. Second operand has 33 states, 33 states have (on average 1.696969696969697) internal successors, (56), 33 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:04,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:04,757 INFO L93 Difference]: Finished difference Result 147 states and 171 transitions. [2022-11-03 02:28:04,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:28:04,757 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 1.696969696969697) internal successors, (56), 33 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-03 02:28:04,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:04,758 INFO L225 Difference]: With dead ends: 147 [2022-11-03 02:28:04,758 INFO L226 Difference]: Without dead ends: 127 [2022-11-03 02:28:04,759 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 39 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 3 IntricatePredicates, 1 DeprecatedPredicates, 825 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=235, Invalid=2126, Unknown=3, NotChecked=288, Total=2652 [2022-11-03 02:28:04,760 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 38 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 271 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 60 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:04,760 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 105 Invalid, 271 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 203 Invalid, 0 Unknown, 60 Unchecked, 0.2s Time] [2022-11-03 02:28:04,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2022-11-03 02:28:04,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 126. [2022-11-03 02:28:04,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126 states, 123 states have (on average 1.2032520325203253) internal successors, (148), 125 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:04,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 148 transitions. [2022-11-03 02:28:04,764 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 148 transitions. Word has length 24 [2022-11-03 02:28:04,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:04,764 INFO L495 AbstractCegarLoop]: Abstraction has 126 states and 148 transitions. [2022-11-03 02:28:04,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 1.696969696969697) internal successors, (56), 33 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:04,765 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 148 transitions. [2022-11-03 02:28:04,765 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:28:04,765 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:04,765 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:04,796 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:04,978 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:04,978 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:04,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:04,979 INFO L85 PathProgramCache]: Analyzing trace with hash -1014140731, now seen corresponding path program 2 times [2022-11-03 02:28:04,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:04,979 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1563593491] [2022-11-03 02:28:04,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:04,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:04,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:05,294 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:28:05,294 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:05,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1563593491] [2022-11-03 02:28:05,295 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1563593491] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:05,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1071222940] [2022-11-03 02:28:05,295 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:28:05,295 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:05,295 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:05,296 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:05,322 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-03 02:28:05,436 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:28:05,436 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:05,438 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-03 02:28:05,440 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:05,562 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:05,614 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:05,614 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-03 02:28:05,788 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 3 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:28:05,788 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:05,968 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:28:05,973 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-03 02:28:06,142 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 45 treesize of output 37 [2022-11-03 02:28:06,415 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:28:06,415 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1071222940] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:06,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2059378017] [2022-11-03 02:28:06,418 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:06,419 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:06,419 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:06,419 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:06,419 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:06,460 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:06,462 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:06,463 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:06,504 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:06,546 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:06,571 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:06,632 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:06,675 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:06,709 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:06,732 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:06,772 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:06,842 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:06,843 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:06,980 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:28:06,981 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:28:07,070 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:07,070 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:07,172 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:07,173 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:07,234 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:10,122 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6211#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:10,123 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:10,123 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:10,123 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 28 [2022-11-03 02:28:10,123 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151893936] [2022-11-03 02:28:10,123 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:10,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-03 02:28:10,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:10,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-03 02:28:10,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1632, Unknown=0, NotChecked=0, Total=1806 [2022-11-03 02:28:10,125 INFO L87 Difference]: Start difference. First operand 126 states and 148 transitions. Second operand has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:11,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:11,620 INFO L93 Difference]: Finished difference Result 147 states and 170 transitions. [2022-11-03 02:28:11,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-03 02:28:11,622 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-03 02:28:11,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:11,623 INFO L225 Difference]: With dead ends: 147 [2022-11-03 02:28:11,623 INFO L226 Difference]: Without dead ends: 147 [2022-11-03 02:28:11,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 911 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=485, Invalid=3675, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:28:11,624 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 52 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 802 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 879 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 802 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 51 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:11,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 150 Invalid, 879 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 802 Invalid, 0 Unknown, 51 Unchecked, 0.5s Time] [2022-11-03 02:28:11,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2022-11-03 02:28:11,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 128. [2022-11-03 02:28:11,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128 states, 125 states have (on average 1.208) internal successors, (151), 127 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:11,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 151 transitions. [2022-11-03 02:28:11,628 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 151 transitions. Word has length 25 [2022-11-03 02:28:11,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:11,628 INFO L495 AbstractCegarLoop]: Abstraction has 128 states and 151 transitions. [2022-11-03 02:28:11,628 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:11,628 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 151 transitions. [2022-11-03 02:28:11,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-03 02:28:11,629 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:11,629 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:11,660 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:11,844 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:11,844 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:11,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:11,845 INFO L85 PathProgramCache]: Analyzing trace with hash 1165606884, now seen corresponding path program 4 times [2022-11-03 02:28:11,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:11,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [912442837] [2022-11-03 02:28:11,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:11,845 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:11,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:12,038 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:28:12,038 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:12,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [912442837] [2022-11-03 02:28:12,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [912442837] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:12,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1925202855] [2022-11-03 02:28:12,038 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:28:12,039 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:12,039 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:12,040 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:12,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-03 02:28:12,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:12,158 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-03 02:28:12,159 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:12,310 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:28:12,310 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:12,499 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:28:12,500 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1925202855] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:12,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [562453392] [2022-11-03 02:28:12,501 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:12,501 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:12,502 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:12,502 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:12,502 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:12,554 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:12,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:12,556 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:12,588 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,639 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,661 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,723 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,770 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,803 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,826 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,866 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:12,915 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:12,916 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:13,015 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:28:13,075 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:28:13,076 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:28:13,200 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:13,200 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:13,290 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:13,290 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:13,356 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:16,097 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6717#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:16,098 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:16,098 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:16,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 23 [2022-11-03 02:28:16,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [893683137] [2022-11-03 02:28:16,098 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:16,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:28:16,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:16,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:28:16,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=1143, Unknown=0, NotChecked=0, Total=1332 [2022-11-03 02:28:16,100 INFO L87 Difference]: Start difference. First operand 128 states and 151 transitions. Second operand has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:16,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:16,505 INFO L93 Difference]: Finished difference Result 164 states and 192 transitions. [2022-11-03 02:28:16,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:28:16,510 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-03 02:28:16,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:16,511 INFO L225 Difference]: With dead ends: 164 [2022-11-03 02:28:16,511 INFO L226 Difference]: Without dead ends: 162 [2022-11-03 02:28:16,511 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 631 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=330, Invalid=1832, Unknown=0, NotChecked=0, Total=2162 [2022-11-03 02:28:16,512 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 168 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:16,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 128 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:28:16,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-11-03 02:28:16,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 124. [2022-11-03 02:28:16,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 121 states have (on average 1.2066115702479339) internal successors, (146), 123 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:16,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 146 transitions. [2022-11-03 02:28:16,517 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 146 transitions. Word has length 26 [2022-11-03 02:28:16,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:16,517 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 146 transitions. [2022-11-03 02:28:16,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:16,517 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 146 transitions. [2022-11-03 02:28:16,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 02:28:16,518 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:16,518 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:16,544 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:16,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:16,726 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:16,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:16,727 INFO L85 PathProgramCache]: Analyzing trace with hash -275718690, now seen corresponding path program 3 times [2022-11-03 02:28:16,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:16,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1307680463] [2022-11-03 02:28:16,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:16,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:16,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:17,287 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:28:17,287 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:17,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1307680463] [2022-11-03 02:28:17,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1307680463] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:17,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1752254073] [2022-11-03 02:28:17,288 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:28:17,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:17,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:17,291 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:17,314 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-03 02:28:17,453 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:28:17,453 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:17,456 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-03 02:28:17,458 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:17,740 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:28:17,911 INFO L356 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-03 02:28:17,911 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 18 [2022-11-03 02:28:17,940 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 4 proven. 12 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:28:17,940 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:18,068 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-03 02:28:18,073 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-03 02:28:18,456 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:28:18,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1752254073] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:18,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1365089672] [2022-11-03 02:28:18,458 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:18,458 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:18,458 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:18,459 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:18,459 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:18,505 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:18,507 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:18,508 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:18,540 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,591 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,614 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,674 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,720 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,760 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,786 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,830 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:18,878 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:18,878 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:19,008 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:28:19,008 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:28:19,089 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:19,089 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:19,188 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:19,189 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:19,240 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:22,256 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7231#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:22,257 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:22,257 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:22,257 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 36 [2022-11-03 02:28:22,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1889672203] [2022-11-03 02:28:22,257 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:22,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-03 02:28:22,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:22,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-03 02:28:22,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=2261, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 02:28:22,259 INFO L87 Difference]: Start difference. First operand 124 states and 146 transitions. Second operand has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:24,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:24,784 INFO L93 Difference]: Finished difference Result 141 states and 162 transitions. [2022-11-03 02:28:24,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-03 02:28:24,785 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-03 02:28:24,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:24,785 INFO L225 Difference]: With dead ends: 141 [2022-11-03 02:28:24,785 INFO L226 Difference]: Without dead ends: 141 [2022-11-03 02:28:24,786 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1244 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=581, Invalid=5119, Unknown=0, NotChecked=0, Total=5700 [2022-11-03 02:28:24,787 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 92 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 795 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 869 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 795 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 49 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:24,787 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 171 Invalid, 869 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 795 Invalid, 0 Unknown, 49 Unchecked, 0.6s Time] [2022-11-03 02:28:24,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141 states. [2022-11-03 02:28:24,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141 to 124. [2022-11-03 02:28:24,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 121 states have (on average 1.1983471074380165) internal successors, (145), 123 states have internal predecessors, (145), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:24,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 145 transitions. [2022-11-03 02:28:24,791 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 145 transitions. Word has length 27 [2022-11-03 02:28:24,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:24,792 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 145 transitions. [2022-11-03 02:28:24,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:24,792 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 145 transitions. [2022-11-03 02:28:24,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 02:28:24,792 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:24,793 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:24,821 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:25,006 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-03 02:28:25,006 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:25,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:25,007 INFO L85 PathProgramCache]: Analyzing trace with hash -71799316, now seen corresponding path program 6 times [2022-11-03 02:28:25,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:25,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1934876464] [2022-11-03 02:28:25,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:25,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:25,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:25,651 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:25,651 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:25,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1934876464] [2022-11-03 02:28:25,651 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1934876464] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:25,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1593466424] [2022-11-03 02:28:25,651 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:28:25,652 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:25,652 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:25,653 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:25,654 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-03 02:28:25,781 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:28:25,781 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:25,783 INFO L263 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 61 conjunts are in the unsatisfiable core [2022-11-03 02:28:25,785 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:26,104 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:26,724 INFO L356 Elim1Store]: treesize reduction 21, result has 48.8 percent of original size [2022-11-03 02:28:26,725 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 58 treesize of output 42 [2022-11-03 02:28:26,770 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 5 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:26,770 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:27,256 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 64 [2022-11-03 02:28:27,264 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 56 [2022-11-03 02:28:28,129 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 25 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:28,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1593466424] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:28,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [760891393] [2022-11-03 02:28:28,131 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:28:28,131 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:28,131 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:28,132 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:28,132 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:28,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:28,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:28,166 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:28,224 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:28,274 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:28,299 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:28,350 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:28,388 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:28,389 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:28,460 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:30,170 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7772#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:30,170 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:30,170 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:30,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 21, 21] total 54 [2022-11-03 02:28:30,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473010383] [2022-11-03 02:28:30,170 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:30,171 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-03 02:28:30,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:30,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-03 02:28:30,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=3602, Unknown=0, NotChecked=0, Total=3906 [2022-11-03 02:28:30,172 INFO L87 Difference]: Start difference. First operand 124 states and 145 transitions. Second operand has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:32,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:32,624 INFO L93 Difference]: Finished difference Result 173 states and 202 transitions. [2022-11-03 02:28:32,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-03 02:28:32,624 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-03 02:28:32,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:32,625 INFO L225 Difference]: With dead ends: 173 [2022-11-03 02:28:32,625 INFO L226 Difference]: Without dead ends: 161 [2022-11-03 02:28:32,626 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2140 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=793, Invalid=7763, Unknown=0, NotChecked=0, Total=8556 [2022-11-03 02:28:32,626 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 120 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 559 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 559 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 85 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:32,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 117 Invalid, 680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 559 Invalid, 0 Unknown, 85 Unchecked, 0.4s Time] [2022-11-03 02:28:32,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2022-11-03 02:28:32,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 148. [2022-11-03 02:28:32,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2137931034482758) internal successors, (176), 147 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:32,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 176 transitions. [2022-11-03 02:28:32,630 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 176 transitions. Word has length 27 [2022-11-03 02:28:32,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:32,631 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 176 transitions. [2022-11-03 02:28:32,631 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:32,631 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 176 transitions. [2022-11-03 02:28:32,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:28:32,632 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:32,632 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:32,657 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:32,832 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-03 02:28:32,832 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:32,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:32,833 INFO L85 PathProgramCache]: Analyzing trace with hash -533783897, now seen corresponding path program 5 times [2022-11-03 02:28:32,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:32,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [706109396] [2022-11-03 02:28:32,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:32,833 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:32,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:33,147 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:28:33,147 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:33,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [706109396] [2022-11-03 02:28:33,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [706109396] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:33,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1082830501] [2022-11-03 02:28:33,148 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:28:33,148 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:33,148 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:33,149 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:33,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-03 02:28:33,315 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:28:33,315 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:33,317 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-03 02:28:33,318 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:33,451 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:28:33,452 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:33,639 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:28:33,692 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:28:33,692 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1082830501] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:33,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [154006523] [2022-11-03 02:28:33,693 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:33,693 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:33,694 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:33,694 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:33,694 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:33,735 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:33,737 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:33,738 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:33,782 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:33,825 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:33,849 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:33,908 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:33,958 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:34,003 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:34,028 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:34,065 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:34,133 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:34,134 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:34,261 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:28:34,317 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:28:34,318 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:28:34,444 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:34,444 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:34,549 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:34,550 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:34,604 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:37,531 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8347#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:37,531 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:37,531 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:37,531 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-03 02:28:37,531 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449180573] [2022-11-03 02:28:37,531 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:37,532 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:28:37,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:37,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:28:37,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=1180, Unknown=0, NotChecked=0, Total=1332 [2022-11-03 02:28:37,532 INFO L87 Difference]: Start difference. First operand 148 states and 176 transitions. Second operand has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:38,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:38,001 INFO L93 Difference]: Finished difference Result 213 states and 250 transitions. [2022-11-03 02:28:38,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:28:38,002 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-03 02:28:38,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:38,002 INFO L225 Difference]: With dead ends: 213 [2022-11-03 02:28:38,003 INFO L226 Difference]: Without dead ends: 213 [2022-11-03 02:28:38,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 54 SyntacticMatches, 3 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 448 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=294, Invalid=1868, Unknown=0, NotChecked=0, Total=2162 [2022-11-03 02:28:38,003 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 136 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 425 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 445 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 425 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:38,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 130 Invalid, 445 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 425 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:28:38,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-11-03 02:28:38,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 188. [2022-11-03 02:28:38,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 185 states have (on average 1.2324324324324325) internal successors, (228), 187 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:38,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 228 transitions. [2022-11-03 02:28:38,009 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 228 transitions. Word has length 28 [2022-11-03 02:28:38,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:38,009 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 228 transitions. [2022-11-03 02:28:38,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:38,010 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 228 transitions. [2022-11-03 02:28:38,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:28:38,010 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:38,011 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:38,034 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:38,214 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:38,214 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:38,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:38,215 INFO L85 PathProgramCache]: Analyzing trace with hash -1466520767, now seen corresponding path program 1 times [2022-11-03 02:28:38,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:38,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1312861478] [2022-11-03 02:28:38,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:38,215 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:38,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:38,813 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-03 02:28:38,813 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:38,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1312861478] [2022-11-03 02:28:38,813 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1312861478] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:38,814 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [763790597] [2022-11-03 02:28:38,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:38,814 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:38,814 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:38,819 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:38,849 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-03 02:28:38,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:38,996 INFO L263 TraceCheckSpWp]: Trace formula consists of 245 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-03 02:28:38,998 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:39,006 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:28:39,117 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,147 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:28:39,203 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:28:39,256 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:28:39,260 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-03 02:28:39,260 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:39,273 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_872) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:28:39,282 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_872) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:28:39,301 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_872) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:28:39,311 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:39,312 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:28:39,350 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:39,351 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:28:39,355 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:28:39,490 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 11 trivial. 3 not checked. [2022-11-03 02:28:39,491 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [763790597] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:39,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [540684110] [2022-11-03 02:28:39,492 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:39,492 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:39,493 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:39,493 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:39,493 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:39,525 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:39,527 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:39,529 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:39,559 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,607 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,631 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,691 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:39,742 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,777 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,838 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:39,882 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:39,883 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:40,005 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:28:40,005 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:28:40,080 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:40,080 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:40,186 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:40,186 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:40,230 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:42,755 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8968#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:42,755 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:42,755 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:42,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 24 [2022-11-03 02:28:42,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1253982216] [2022-11-03 02:28:42,755 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:42,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-03 02:28:42,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:42,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-03 02:28:42,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=1074, Unknown=3, NotChecked=204, Total=1406 [2022-11-03 02:28:42,756 INFO L87 Difference]: Start difference. First operand 188 states and 228 transitions. Second operand has 24 states, 24 states have (on average 1.9166666666666667) internal successors, (46), 24 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:43,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:43,036 INFO L93 Difference]: Finished difference Result 204 states and 240 transitions. [2022-11-03 02:28:43,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:28:43,036 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 24 states have (on average 1.9166666666666667) internal successors, (46), 24 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-03 02:28:43,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:43,037 INFO L225 Difference]: With dead ends: 204 [2022-11-03 02:28:43,038 INFO L226 Difference]: Without dead ends: 182 [2022-11-03 02:28:43,038 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 57 SyntacticMatches, 5 SemanticMatches, 40 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 428 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=155, Invalid=1336, Unknown=3, NotChecked=228, Total=1722 [2022-11-03 02:28:43,039 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 29 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 93 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:43,039 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 123 Invalid, 344 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 241 Invalid, 0 Unknown, 93 Unchecked, 0.1s Time] [2022-11-03 02:28:43,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-11-03 02:28:43,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 179. [2022-11-03 02:28:43,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 176 states have (on average 1.1988636363636365) internal successors, (211), 178 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:43,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 211 transitions. [2022-11-03 02:28:43,044 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 211 transitions. Word has length 28 [2022-11-03 02:28:43,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:43,044 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 211 transitions. [2022-11-03 02:28:43,044 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 24 states have (on average 1.9166666666666667) internal successors, (46), 24 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:43,044 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 211 transitions. [2022-11-03 02:28:43,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:28:43,045 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:43,045 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:43,081 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:43,270 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-03 02:28:43,270 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:43,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:43,271 INFO L85 PathProgramCache]: Analyzing trace with hash 282419348, now seen corresponding path program 4 times [2022-11-03 02:28:43,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:43,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272785411] [2022-11-03 02:28:43,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:43,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:43,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:43,940 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:28:43,941 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:43,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272785411] [2022-11-03 02:28:43,941 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272785411] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:43,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [859817173] [2022-11-03 02:28:43,941 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:28:43,941 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:43,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:43,942 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:43,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-03 02:28:44,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:44,101 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-03 02:28:44,103 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:44,436 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:28:44,709 INFO L356 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-03 02:28:44,710 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-03 02:28:44,742 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 6 proven. 23 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:28:44,742 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:44,940 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-03 02:28:44,942 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-11-03 02:28:45,433 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:28:45,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [859817173] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:45,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1522333787] [2022-11-03 02:28:45,435 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:45,435 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:45,435 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:45,435 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:45,436 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:45,480 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:45,482 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:45,488 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:45,529 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:45,571 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:45,593 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:45,659 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:45,697 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:45,738 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:45,764 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:45,801 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:45,846 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:45,846 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:45,960 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:28:45,961 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:28:46,043 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:46,044 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:46,128 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:28:46,129 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:28:46,192 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:49,423 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9599#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:49,423 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:49,423 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:49,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 44 [2022-11-03 02:28:49,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1422461401] [2022-11-03 02:28:49,424 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:49,424 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-03 02:28:49,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:49,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-03 02:28:49,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=257, Invalid=3049, Unknown=0, NotChecked=0, Total=3306 [2022-11-03 02:28:49,425 INFO L87 Difference]: Start difference. First operand 179 states and 211 transitions. Second operand has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:52,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:52,853 INFO L93 Difference]: Finished difference Result 207 states and 236 transitions. [2022-11-03 02:28:52,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-03 02:28:52,854 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-03 02:28:52,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:52,855 INFO L225 Difference]: With dead ends: 207 [2022-11-03 02:28:52,855 INFO L226 Difference]: Without dead ends: 192 [2022-11-03 02:28:52,856 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1949 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=837, Invalid=7353, Unknown=0, NotChecked=0, Total=8190 [2022-11-03 02:28:52,857 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 122 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 1083 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 1174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 1083 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 60 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:52,857 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 219 Invalid, 1174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 1083 Invalid, 0 Unknown, 60 Unchecked, 0.7s Time] [2022-11-03 02:28:52,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-03 02:28:52,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 167. [2022-11-03 02:28:52,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 164 states have (on average 1.1829268292682926) internal successors, (194), 166 states have internal predecessors, (194), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:52,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 194 transitions. [2022-11-03 02:28:52,861 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 194 transitions. Word has length 31 [2022-11-03 02:28:52,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:52,862 INFO L495 AbstractCegarLoop]: Abstraction has 167 states and 194 transitions. [2022-11-03 02:28:52,862 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 1.8181818181818181) internal successors, (80), 44 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:52,862 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 194 transitions. [2022-11-03 02:28:52,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:28:52,863 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:52,863 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:52,894 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:53,078 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-03 02:28:53,078 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:53,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:53,079 INFO L85 PathProgramCache]: Analyzing trace with hash -1766708574, now seen corresponding path program 7 times [2022-11-03 02:28:53,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:53,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [627436212] [2022-11-03 02:28:53,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:53,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:53,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:53,768 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:53,768 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:53,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [627436212] [2022-11-03 02:28:53,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [627436212] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:53,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1533517686] [2022-11-03 02:28:53,769 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:28:53,769 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:53,769 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:53,770 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:53,790 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-03 02:28:53,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:53,927 INFO L263 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-03 02:28:53,929 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:54,458 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:28:55,244 INFO L356 Elim1Store]: treesize reduction 25, result has 49.0 percent of original size [2022-11-03 02:28:55,245 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 57 treesize of output 50 [2022-11-03 02:28:55,284 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 6 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:55,284 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:55,954 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 77 [2022-11-03 02:28:55,959 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:55,959 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 89 treesize of output 67 [2022-11-03 02:28:56,934 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:56,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1533517686] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:56,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [814823290] [2022-11-03 02:28:56,936 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:28:56,937 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:56,937 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:56,937 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:56,937 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:56,974 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:56,976 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:56,977 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:57,022 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:57,069 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:57,100 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:57,148 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:57,211 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:57,211 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:57,275 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:59,165 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10296#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:59,165 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:59,165 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:59,165 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 24, 24] total 63 [2022-11-03 02:28:59,165 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1191663645] [2022-11-03 02:28:59,165 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:59,166 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-03 02:28:59,166 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:59,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-03 02:28:59,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=399, Invalid=4713, Unknown=0, NotChecked=0, Total=5112 [2022-11-03 02:28:59,171 INFO L87 Difference]: Start difference. First operand 167 states and 194 transitions. Second operand has 63 states, 63 states have (on average 1.4285714285714286) internal successors, (90), 63 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:01,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:29:01,968 INFO L93 Difference]: Finished difference Result 243 states and 283 transitions. [2022-11-03 02:29:01,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-03 02:29:01,968 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 63 states have (on average 1.4285714285714286) internal successors, (90), 63 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-03 02:29:01,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:29:01,970 INFO L225 Difference]: With dead ends: 243 [2022-11-03 02:29:01,970 INFO L226 Difference]: Without dead ends: 229 [2022-11-03 02:29:01,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 38 SyntacticMatches, 1 SemanticMatches, 106 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3099 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=1067, Invalid=10489, Unknown=0, NotChecked=0, Total=11556 [2022-11-03 02:29:01,971 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 132 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 770 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 917 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 770 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 109 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:29:01,972 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 155 Invalid, 917 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 770 Invalid, 0 Unknown, 109 Unchecked, 0.5s Time] [2022-11-03 02:29:01,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2022-11-03 02:29:01,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 203. [2022-11-03 02:29:01,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 203 states, 200 states have (on average 1.2) internal successors, (240), 202 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:01,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 240 transitions. [2022-11-03 02:29:01,977 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 240 transitions. Word has length 31 [2022-11-03 02:29:01,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:29:01,977 INFO L495 AbstractCegarLoop]: Abstraction has 203 states and 240 transitions. [2022-11-03 02:29:01,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 63 states have (on average 1.4285714285714286) internal successors, (90), 63 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:01,978 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 240 transitions. [2022-11-03 02:29:01,978 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-03 02:29:01,978 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:29:01,979 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:29:02,016 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-03 02:29:02,200 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-03 02:29:02,200 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:29:02,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:29:02,200 INFO L85 PathProgramCache]: Analyzing trace with hash -1471045521, now seen corresponding path program 6 times [2022-11-03 02:29:02,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:29:02,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [621268546] [2022-11-03 02:29:02,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:29:02,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:29:02,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:29:03,171 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:29:03,171 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:29:03,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [621268546] [2022-11-03 02:29:03,172 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [621268546] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:29:03,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1082250260] [2022-11-03 02:29:03,172 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:29:03,172 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:29:03,172 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:29:03,180 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:29:03,182 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-03 02:29:03,350 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:29:03,350 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:29:03,353 INFO L263 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-03 02:29:03,363 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:29:03,781 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:03,854 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:29:03,854 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-03 02:29:03,861 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:29:05,619 INFO L356 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-03 02:29:05,620 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 62 treesize of output 70 [2022-11-03 02:29:05,659 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:29:05,811 INFO L356 Elim1Store]: treesize reduction 24, result has 74.2 percent of original size [2022-11-03 02:29:05,811 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 66 treesize of output 118 [2022-11-03 02:29:06,487 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-03 02:29:06,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:06,633 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:29:06,634 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:29:06,635 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-03 02:29:06,643 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:29:06,643 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:29:06,653 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1015 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1015) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:29:06,660 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1015 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1015) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:29:06,666 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1015 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1015) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) (= |c_ULTIMATE.start_cstrcat_#t~mem6#1| 0)) is different from false [2022-11-03 02:29:06,673 WARN L833 $PredicateComparison]: unable to prove that (or (= |c_ULTIMATE.start_cstrcat_#t~mem6#1| 0) (forall ((v_ArrVal_1015 (Array Int Int)) (v_ArrVal_1014 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1014) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1015) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0))) is different from false [2022-11-03 02:29:06,680 WARN L833 $PredicateComparison]: unable to prove that (or (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post5#1.base|) |c_ULTIMATE.start_cstrcat_#t~post5#1.offset|) 0) (forall ((v_ArrVal_1015 (Array Int Int)) (v_ArrVal_1014 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1014) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1015) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0))) is different from false [2022-11-03 02:29:06,687 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1015 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1015) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:29:06,902 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:29:06,903 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-11-03 02:29:06,914 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:29:06,914 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-11-03 02:29:06,920 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:29:06,921 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-11-03 02:29:06,942 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:29:07,924 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 11 not checked. [2022-11-03 02:29:07,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1082250260] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:29:07,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1668746972] [2022-11-03 02:29:07,926 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:29:07,926 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:29:07,926 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:29:07,926 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:29:07,927 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:29:07,966 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:07,969 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:07,969 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:29:08,002 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:29:08,050 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:08,072 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:08,117 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:29:08,163 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:08,196 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:08,217 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:08,262 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:08,308 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:29:08,309 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:29:08,399 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:29:08,450 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:29:08,450 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:29:08,562 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:29:08,562 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:29:08,657 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:29:08,657 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:29:08,700 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:29:12,418 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11067#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:29:12,418 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:29:12,418 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:29:12,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 23, 23] total 58 [2022-11-03 02:29:12,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [774474177] [2022-11-03 02:29:12,418 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:29:12,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-11-03 02:29:12,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:29:12,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-11-03 02:29:12,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=318, Invalid=3990, Unknown=6, NotChecked=798, Total=5112 [2022-11-03 02:29:12,420 INFO L87 Difference]: Start difference. First operand 203 states and 240 transitions. Second operand has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:15,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:29:15,489 INFO L93 Difference]: Finished difference Result 272 states and 320 transitions. [2022-11-03 02:29:15,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-03 02:29:15,490 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-03 02:29:15,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:29:15,491 INFO L225 Difference]: With dead ends: 272 [2022-11-03 02:29:15,491 INFO L226 Difference]: Without dead ends: 243 [2022-11-03 02:29:15,492 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 154 GetRequests, 44 SyntacticMatches, 8 SemanticMatches, 102 ConstructedPredicates, 6 IntricatePredicates, 1 DeprecatedPredicates, 2448 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=763, Invalid=8761, Unknown=6, NotChecked=1182, Total=10712 [2022-11-03 02:29:15,492 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 163 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 358 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 93 SdHoareTripleChecker+Invalid, 913 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 358 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 482 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:29:15,493 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 93 Invalid, 913 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 358 Invalid, 0 Unknown, 482 Unchecked, 0.3s Time] [2022-11-03 02:29:15,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2022-11-03 02:29:15,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 238. [2022-11-03 02:29:15,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 235 states have (on average 1.195744680851064) internal successors, (281), 237 states have internal predecessors, (281), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:15,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 281 transitions. [2022-11-03 02:29:15,498 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 281 transitions. Word has length 32 [2022-11-03 02:29:15,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:29:15,499 INFO L495 AbstractCegarLoop]: Abstraction has 238 states and 281 transitions. [2022-11-03 02:29:15,499 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:15,499 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 281 transitions. [2022-11-03 02:29:15,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-03 02:29:15,500 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:29:15,500 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:29:15,536 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-03 02:29:15,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-03 02:29:15,723 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:29:15,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:29:15,723 INFO L85 PathProgramCache]: Analyzing trace with hash -945458250, now seen corresponding path program 2 times [2022-11-03 02:29:15,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:29:15,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2135452686] [2022-11-03 02:29:15,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:29:15,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:29:15,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:29:16,757 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:29:16,757 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:29:16,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2135452686] [2022-11-03 02:29:16,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2135452686] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:29:16,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [363926286] [2022-11-03 02:29:16,758 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:29:16,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:29:16,758 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:29:16,759 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:29:16,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-03 02:29:16,941 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-03 02:29:16,941 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:29:16,944 INFO L263 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-03 02:29:16,945 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:29:17,207 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:29:17,248 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:29:17,250 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:29:17,250 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-03 02:29:17,272 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 3 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-03 02:29:17,272 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:29:17,301 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:29:17,304 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:29:17,672 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 6 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-03 02:29:17,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [363926286] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:29:17,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [201162457] [2022-11-03 02:29:17,675 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:29:17,675 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:29:17,675 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:29:17,676 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:29:17,676 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:29:17,710 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:17,712 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:17,713 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:29:17,748 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:17,791 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:17,812 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:17,864 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:29:17,906 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:17,940 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:17,963 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:18,021 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:18,069 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:29:18,069 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:29:18,189 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:29:18,189 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:29:18,261 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:29:18,261 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:29:18,344 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:29:18,344 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:29:18,409 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:29:21,366 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11900#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:29:21,366 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:29:21,366 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:29:21,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 12, 12] total 39 [2022-11-03 02:29:21,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1605378811] [2022-11-03 02:29:21,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:29:21,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-03 02:29:21,367 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:29:21,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-03 02:29:21,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=261, Invalid=2495, Unknown=0, NotChecked=0, Total=2756 [2022-11-03 02:29:21,368 INFO L87 Difference]: Start difference. First operand 238 states and 281 transitions. Second operand has 39 states, 39 states have (on average 1.8205128205128205) internal successors, (71), 39 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:22,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:29:22,306 INFO L93 Difference]: Finished difference Result 238 states and 280 transitions. [2022-11-03 02:29:22,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-03 02:29:22,307 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 1.8205128205128205) internal successors, (71), 39 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-03 02:29:22,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:29:22,308 INFO L225 Difference]: With dead ends: 238 [2022-11-03 02:29:22,308 INFO L226 Difference]: Without dead ends: 234 [2022-11-03 02:29:22,309 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1102 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=475, Invalid=3815, Unknown=0, NotChecked=0, Total=4290 [2022-11-03 02:29:22,309 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 76 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 365 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 430 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 29 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:29:22,310 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 119 Invalid, 430 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 365 Invalid, 0 Unknown, 29 Unchecked, 0.2s Time] [2022-11-03 02:29:22,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2022-11-03 02:29:22,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 234. [2022-11-03 02:29:22,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 231 states have (on average 1.1904761904761905) internal successors, (275), 233 states have internal predecessors, (275), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:22,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 275 transitions. [2022-11-03 02:29:22,315 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 275 transitions. Word has length 34 [2022-11-03 02:29:22,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:29:22,315 INFO L495 AbstractCegarLoop]: Abstraction has 234 states and 275 transitions. [2022-11-03 02:29:22,315 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 1.8205128205128205) internal successors, (71), 39 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:22,316 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 275 transitions. [2022-11-03 02:29:22,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-03 02:29:22,316 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:29:22,316 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:29:22,350 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-11-03 02:29:22,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-03 02:29:22,534 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:29:22,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:29:22,535 INFO L85 PathProgramCache]: Analyzing trace with hash 207279946, now seen corresponding path program 5 times [2022-11-03 02:29:22,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:29:22,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329427180] [2022-11-03 02:29:22,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:29:22,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:29:22,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:29:23,312 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:29:23,312 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:29:23,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329427180] [2022-11-03 02:29:23,312 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329427180] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:29:23,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2125971235] [2022-11-03 02:29:23,313 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:29:23,313 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:29:23,313 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:29:23,315 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:29:23,325 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-03 02:29:23,579 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:29:23,579 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:29:23,581 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-03 02:29:23,583 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:29:23,746 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:37,359 INFO L356 Elim1Store]: treesize reduction 12, result has 87.1 percent of original size [2022-11-03 02:29:37,359 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 42 treesize of output 99 [2022-11-03 02:29:37,874 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-03 02:29:37,874 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:29:39,017 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 53 treesize of output 45 [2022-11-03 02:29:39,060 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:29:39,060 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 77 treesize of output 117 [2022-11-03 02:29:39,355 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 34 [2022-11-03 02:29:39,739 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 1 proven. 28 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-03 02:29:39,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2125971235] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:29:39,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [39866182] [2022-11-03 02:29:39,740 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:29:39,740 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:29:39,741 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:29:39,741 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:29:39,741 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:29:39,770 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:39,773 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:39,774 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:29:39,813 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:29:39,849 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:39,872 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:39,929 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:39,972 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:40,010 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:40,040 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:40,089 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:40,134 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:29:40,134 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:29:40,260 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:29:40,260 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:29:40,330 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:29:40,330 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:29:40,433 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:29:40,434 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:29:40,489 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:29:44,276 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12666#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:29:44,277 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:29:44,277 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:29:44,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17, 17] total 49 [2022-11-03 02:29:44,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [777624822] [2022-11-03 02:29:44,277 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:29:44,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-03 02:29:44,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:29:44,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-03 02:29:44,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=303, Invalid=3726, Unknown=3, NotChecked=0, Total=4032 [2022-11-03 02:29:44,279 INFO L87 Difference]: Start difference. First operand 234 states and 275 transitions. Second operand has 50 states, 49 states have (on average 1.816326530612245) internal successors, (89), 50 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:00,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:00,044 INFO L93 Difference]: Finished difference Result 275 states and 319 transitions. [2022-11-03 02:30:00,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-03 02:30:00,045 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 49 states have (on average 1.816326530612245) internal successors, (89), 50 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-03 02:30:00,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:00,046 INFO L225 Difference]: With dead ends: 275 [2022-11-03 02:30:00,046 INFO L226 Difference]: Without dead ends: 235 [2022-11-03 02:30:00,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2792 ImplicationChecksByTransitivity, 34.1s TimeCoverageRelationStatistics Valid=1099, Invalid=10666, Unknown=7, NotChecked=0, Total=11772 [2022-11-03 02:30:00,047 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 78 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 789 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 958 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 789 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 140 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:00,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 84 Invalid, 958 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 789 Invalid, 0 Unknown, 140 Unchecked, 0.6s Time] [2022-11-03 02:30:00,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-11-03 02:30:00,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 214. [2022-11-03 02:30:00,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 214 states, 211 states have (on average 1.1990521327014219) internal successors, (253), 213 states have internal predecessors, (253), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:00,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 253 transitions. [2022-11-03 02:30:00,053 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 253 transitions. Word has length 35 [2022-11-03 02:30:00,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:00,053 INFO L495 AbstractCegarLoop]: Abstraction has 214 states and 253 transitions. [2022-11-03 02:30:00,053 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 49 states have (on average 1.816326530612245) internal successors, (89), 50 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:00,053 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 253 transitions. [2022-11-03 02:30:00,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-03 02:30:00,054 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:00,054 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:00,078 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:00,258 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-11-03 02:30:00,259 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:00,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:00,259 INFO L85 PathProgramCache]: Analyzing trace with hash -1157391528, now seen corresponding path program 8 times [2022-11-03 02:30:00,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:00,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1380277014] [2022-11-03 02:30:00,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:00,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:00,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:01,097 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:01,097 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:01,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1380277014] [2022-11-03 02:30:01,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1380277014] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:01,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [277774943] [2022-11-03 02:30:01,098 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:30:01,098 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:01,098 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:01,103 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:01,111 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-03 02:30:01,425 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-03 02:30:01,426 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:30:01,428 INFO L263 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-03 02:30:01,430 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:01,489 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:30:01,490 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:30:02,546 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 36 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:02,546 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:03,730 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 49 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:03,730 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [277774943] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:03,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [533414180] [2022-11-03 02:30:03,732 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:30:03,732 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:03,732 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:03,732 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:03,732 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:03,793 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:03,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:03,797 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:03,858 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:03,909 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:03,937 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:04,000 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:04,055 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:04,055 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:04,143 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:06,055 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13523#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:06,055 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:06,056 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:06,056 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 19, 19] total 58 [2022-11-03 02:30:06,056 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232160515] [2022-11-03 02:30:06,056 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:06,056 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-03 02:30:06,056 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:06,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-03 02:30:06,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=459, Invalid=4097, Unknown=0, NotChecked=0, Total=4556 [2022-11-03 02:30:06,059 INFO L87 Difference]: Start difference. First operand 214 states and 253 transitions. Second operand has 59 states, 58 states have (on average 1.8103448275862069) internal successors, (105), 59 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:09,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:09,200 INFO L93 Difference]: Finished difference Result 389 states and 427 transitions. [2022-11-03 02:30:09,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-03 02:30:09,201 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 58 states have (on average 1.8103448275862069) internal successors, (105), 59 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-11-03 02:30:09,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:09,202 INFO L225 Difference]: With dead ends: 389 [2022-11-03 02:30:09,202 INFO L226 Difference]: Without dead ends: 389 [2022-11-03 02:30:09,203 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 92 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2035 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=1467, Invalid=7275, Unknown=0, NotChecked=0, Total=8742 [2022-11-03 02:30:09,203 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 704 mSDsluCounter, 245 mSDsCounter, 0 mSdLazyCounter, 1139 mSolverCounterSat, 205 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 704 SdHoareTripleChecker+Valid, 249 SdHoareTripleChecker+Invalid, 1344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 205 IncrementalHoareTripleChecker+Valid, 1139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:09,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [704 Valid, 249 Invalid, 1344 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [205 Valid, 1139 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-03 02:30:09,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 389 states. [2022-11-03 02:30:09,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 389 to 216. [2022-11-03 02:30:09,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 213 states have (on average 1.187793427230047) internal successors, (253), 215 states have internal predecessors, (253), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:09,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 253 transitions. [2022-11-03 02:30:09,210 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 253 transitions. Word has length 35 [2022-11-03 02:30:09,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:09,211 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 253 transitions. [2022-11-03 02:30:09,211 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 58 states have (on average 1.8103448275862069) internal successors, (105), 59 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:09,211 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 253 transitions. [2022-11-03 02:30:09,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 02:30:09,212 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:09,212 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:09,243 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:09,426 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:09,426 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:09,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:09,427 INFO L85 PathProgramCache]: Analyzing trace with hash -1976859297, now seen corresponding path program 7 times [2022-11-03 02:30:09,427 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:09,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895282988] [2022-11-03 02:30:09,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:09,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:09,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:09,826 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:30:09,827 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:09,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895282988] [2022-11-03 02:30:09,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895282988] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:09,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [396724121] [2022-11-03 02:30:09,827 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:30:09,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:09,827 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:09,828 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:09,846 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-03 02:30:10,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:10,011 INFO L263 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-03 02:30:10,013 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:10,204 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:30:10,204 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:10,427 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:30:10,494 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:30:10,494 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [396724121] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:10,494 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1218106944] [2022-11-03 02:30:10,495 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:30:10,495 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:10,496 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:10,496 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:10,496 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:10,535 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:10,537 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:10,537 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:10,570 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,618 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,640 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,691 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,740 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,779 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,842 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:10,887 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:10,887 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:10,971 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:11,023 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:30:11,023 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:30:11,144 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:11,144 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:11,252 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:11,252 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:11,303 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:14,475 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14426#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:14,475 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:14,476 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:14,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 26 [2022-11-03 02:30:14,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [43095089] [2022-11-03 02:30:14,476 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:14,476 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-03 02:30:14,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:14,477 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-03 02:30:14,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=1469, Unknown=0, NotChecked=0, Total=1640 [2022-11-03 02:30:14,477 INFO L87 Difference]: Start difference. First operand 216 states and 253 transitions. Second operand has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:15,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:15,153 INFO L93 Difference]: Finished difference Result 297 states and 346 transitions. [2022-11-03 02:30:15,153 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:30:15,153 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-03 02:30:15,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:15,154 INFO L225 Difference]: With dead ends: 297 [2022-11-03 02:30:15,155 INFO L226 Difference]: Without dead ends: 297 [2022-11-03 02:30:15,155 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 75 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 656 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=386, Invalid=2476, Unknown=0, NotChecked=0, Total=2862 [2022-11-03 02:30:15,156 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 191 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 524 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 550 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 524 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:15,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 167 Invalid, 550 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 524 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:30:15,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-11-03 02:30:15,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 265. [2022-11-03 02:30:15,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.217557251908397) internal successors, (319), 264 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:15,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 319 transitions. [2022-11-03 02:30:15,163 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 319 transitions. Word has length 36 [2022-11-03 02:30:15,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:15,163 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 319 transitions. [2022-11-03 02:30:15,163 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:15,163 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 319 transitions. [2022-11-03 02:30:15,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 02:30:15,164 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:15,164 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:15,202 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:15,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:15,386 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:15,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:15,387 INFO L85 PathProgramCache]: Analyzing trace with hash -595502215, now seen corresponding path program 3 times [2022-11-03 02:30:15,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:15,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [875676218] [2022-11-03 02:30:15,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:15,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:15,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:16,386 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 6 proven. 31 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:30:16,387 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:16,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [875676218] [2022-11-03 02:30:16,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [875676218] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:16,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [836728243] [2022-11-03 02:30:16,387 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:30:16,387 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:16,387 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:16,391 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:16,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-03 02:30:16,648 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:30:16,648 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:30:16,651 INFO L263 TraceCheckSpWp]: Trace formula consists of 302 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-03 02:30:16,654 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:16,664 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:30:16,851 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:30:16,870 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:30:16,956 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:30:17,042 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:30:17,113 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:30:17,116 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-03 02:30:17,117 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:17,129 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1281 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1281) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:30:17,138 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1281 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1281) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:30:17,146 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1280 (Array Int Int)) (v_ArrVal_1281 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1280) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1281) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:30:17,154 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1281 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1281) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:30:17,171 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1281 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1281) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:30:17,177 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:30:17,178 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:30:17,184 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:30:17,184 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:30:17,188 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:30:17,438 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 6 proven. 5 refuted. 0 times theorem prover too weak. 18 trivial. 11 not checked. [2022-11-03 02:30:17,438 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [836728243] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:17,439 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [586298011] [2022-11-03 02:30:17,440 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:30:17,440 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:17,440 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:17,440 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:17,441 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:17,482 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:17,485 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:17,486 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:17,529 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,583 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,609 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,659 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,704 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,736 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,768 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,808 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:17,857 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:17,857 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:17,988 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:30:17,989 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:30:18,064 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:18,064 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:18,164 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:18,164 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:18,213 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:21,424 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15274#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:21,424 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:21,424 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:21,424 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 15, 15] total 36 [2022-11-03 02:30:21,424 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643978378] [2022-11-03 02:30:21,424 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:21,425 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-03 02:30:21,425 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:21,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-03 02:30:21,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=1825, Unknown=5, NotChecked=450, Total=2450 [2022-11-03 02:30:21,425 INFO L87 Difference]: Start difference. First operand 265 states and 319 transitions. Second operand has 36 states, 36 states have (on average 1.9166666666666667) internal successors, (69), 36 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:22,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:22,230 INFO L93 Difference]: Finished difference Result 288 states and 340 transitions. [2022-11-03 02:30:22,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-03 02:30:22,231 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.9166666666666667) internal successors, (69), 36 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-03 02:30:22,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:22,232 INFO L225 Difference]: With dead ends: 288 [2022-11-03 02:30:22,232 INFO L226 Difference]: Without dead ends: 268 [2022-11-03 02:30:22,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 77 SyntacticMatches, 6 SemanticMatches, 57 ConstructedPredicates, 5 IntricatePredicates, 0 DeprecatedPredicates, 727 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=237, Invalid=2640, Unknown=5, NotChecked=540, Total=3422 [2022-11-03 02:30:22,233 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 53 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 605 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 857 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 605 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 227 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:22,233 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 193 Invalid, 857 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 605 Invalid, 0 Unknown, 227 Unchecked, 0.3s Time] [2022-11-03 02:30:22,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2022-11-03 02:30:22,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 257. [2022-11-03 02:30:22,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 257 states, 254 states have (on average 1.1968503937007875) internal successors, (304), 256 states have internal predecessors, (304), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:22,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 304 transitions. [2022-11-03 02:30:22,239 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 304 transitions. Word has length 36 [2022-11-03 02:30:22,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:22,239 INFO L495 AbstractCegarLoop]: Abstraction has 257 states and 304 transitions. [2022-11-03 02:30:22,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.9166666666666667) internal successors, (69), 36 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:22,240 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 304 transitions. [2022-11-03 02:30:22,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:30:22,240 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:22,241 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:22,278 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-11-03 02:30:22,454 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-03 02:30:22,454 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:22,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:22,455 INFO L85 PathProgramCache]: Analyzing trace with hash -1153096033, now seen corresponding path program 2 times [2022-11-03 02:30:22,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:22,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [351317612] [2022-11-03 02:30:22,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:22,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:22,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:22,883 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 6 proven. 31 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:30:22,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:22,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [351317612] [2022-11-03 02:30:22,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [351317612] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:22,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1533537047] [2022-11-03 02:30:22,884 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:30:22,884 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:22,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:22,885 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:22,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-03 02:30:23,074 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-03 02:30:23,074 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:30:23,076 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-03 02:30:23,078 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:23,091 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:30:23,091 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:30:23,495 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 8 proven. 26 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:30:23,495 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:24,152 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 9 proven. 25 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:30:24,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1533537047] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:24,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1113194839] [2022-11-03 02:30:24,154 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:30:24,154 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:24,154 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:24,154 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:24,155 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:24,190 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:24,193 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:24,193 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:24,224 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,271 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,310 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,376 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,420 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,454 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,477 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,519 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:24,562 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:24,562 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:24,656 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:24,710 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:30:24,710 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:30:24,820 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:24,820 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:24,921 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:24,922 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:24,980 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:28,537 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16109#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:28,537 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:28,537 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:28,538 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 37 [2022-11-03 02:30:28,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884507000] [2022-11-03 02:30:28,538 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:28,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-03 02:30:28,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:28,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-03 02:30:28,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=255, Invalid=2397, Unknown=0, NotChecked=0, Total=2652 [2022-11-03 02:30:28,539 INFO L87 Difference]: Start difference. First operand 257 states and 304 transitions. Second operand has 38 states, 37 states have (on average 2.5675675675675675) internal successors, (95), 38 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:33,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:33,905 INFO L93 Difference]: Finished difference Result 309 states and 353 transitions. [2022-11-03 02:30:33,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-03 02:30:33,906 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 2.5675675675675675) internal successors, (95), 38 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:30:33,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:33,907 INFO L225 Difference]: With dead ends: 309 [2022-11-03 02:30:33,907 INFO L226 Difference]: Without dead ends: 309 [2022-11-03 02:30:33,909 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 113 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2655 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=2253, Invalid=10857, Unknown=0, NotChecked=0, Total=13110 [2022-11-03 02:30:33,909 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 499 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 1386 mSolverCounterSat, 196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 499 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 1582 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 196 IncrementalHoareTripleChecker+Valid, 1386 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:33,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [499 Valid, 95 Invalid, 1582 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [196 Valid, 1386 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-03 02:30:33,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 309 states. [2022-11-03 02:30:33,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 309 to 272. [2022-11-03 02:30:33,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 272 states, 269 states have (on average 1.1858736059479553) internal successors, (319), 271 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:33,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272 states to 272 states and 319 transitions. [2022-11-03 02:30:33,915 INFO L78 Accepts]: Start accepts. Automaton has 272 states and 319 transitions. Word has length 37 [2022-11-03 02:30:33,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:33,916 INFO L495 AbstractCegarLoop]: Abstraction has 272 states and 319 transitions. [2022-11-03 02:30:33,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 2.5675675675675675) internal successors, (95), 38 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:33,916 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 319 transitions. [2022-11-03 02:30:33,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:30:33,917 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:33,917 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:33,953 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:34,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-03 02:30:34,130 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:34,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:34,131 INFO L85 PathProgramCache]: Analyzing trace with hash 143271857, now seen corresponding path program 9 times [2022-11-03 02:30:34,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:34,131 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2064649780] [2022-11-03 02:30:34,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:34,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:34,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:36,514 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 33 proven. 79 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:30:36,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:36,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2064649780] [2022-11-03 02:30:36,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2064649780] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:36,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [717966778] [2022-11-03 02:30:36,515 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:30:36,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:36,515 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:36,519 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:36,526 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-03 02:30:36,694 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:30:36,694 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:30:36,697 INFO L263 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-03 02:30:36,698 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:37,279 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:38,765 INFO L356 Elim1Store]: treesize reduction 29, result has 49.1 percent of original size [2022-11-03 02:30:38,765 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 78 treesize of output 58 [2022-11-03 02:30:38,771 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-03 02:30:38,776 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 21 proven. 91 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:30:38,776 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:39,342 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 90 [2022-11-03 02:30:39,357 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 78 [2022-11-03 02:30:40,926 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-03 02:30:40,930 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 63 proven. 49 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:30:40,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [717966778] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:40,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1601318918] [2022-11-03 02:30:40,932 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:30:40,932 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:40,932 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:40,932 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:40,933 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:40,966 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:40,968 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:40,969 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:41,017 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:41,072 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:41,098 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:41,146 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:41,193 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:41,193 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:41,254 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:43,280 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17114#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:43,280 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:43,280 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:43,280 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 27] total 68 [2022-11-03 02:30:43,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544100892] [2022-11-03 02:30:43,280 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:43,281 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-03 02:30:43,281 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:43,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-03 02:30:43,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=526, Invalid=5326, Unknown=0, NotChecked=0, Total=5852 [2022-11-03 02:30:43,282 INFO L87 Difference]: Start difference. First operand 272 states and 319 transitions. Second operand has 68 states, 68 states have (on average 1.3823529411764706) internal successors, (94), 68 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:47,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:47,523 INFO L93 Difference]: Finished difference Result 356 states and 416 transitions. [2022-11-03 02:30:47,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-03 02:30:47,527 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 68 states have (on average 1.3823529411764706) internal successors, (94), 68 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:30:47,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:47,528 INFO L225 Difference]: With dead ends: 356 [2022-11-03 02:30:47,528 INFO L226 Difference]: Without dead ends: 324 [2022-11-03 02:30:47,529 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 106 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3133 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=1301, Invalid=10255, Unknown=0, NotChecked=0, Total=11556 [2022-11-03 02:30:47,530 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 137 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 388 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 596 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 388 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 161 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:47,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 101 Invalid, 596 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 388 Invalid, 0 Unknown, 161 Unchecked, 0.4s Time] [2022-11-03 02:30:47,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2022-11-03 02:30:47,534 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 300. [2022-11-03 02:30:47,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 297 states have (on average 1.1919191919191918) internal successors, (354), 299 states have internal predecessors, (354), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:47,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 354 transitions. [2022-11-03 02:30:47,536 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 354 transitions. Word has length 37 [2022-11-03 02:30:47,536 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:47,537 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 354 transitions. [2022-11-03 02:30:47,537 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 68 states have (on average 1.3823529411764706) internal successors, (94), 68 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:47,537 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 354 transitions. [2022-11-03 02:30:47,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-03 02:30:47,538 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:47,538 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:47,565 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:47,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:47,750 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:47,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:47,751 INFO L85 PathProgramCache]: Analyzing trace with hash -1197361096, now seen corresponding path program 6 times [2022-11-03 02:30:47,751 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:47,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [188328404] [2022-11-03 02:30:47,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:47,751 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:47,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:48,407 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 5 proven. 31 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-03 02:30:48,407 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:48,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [188328404] [2022-11-03 02:30:48,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [188328404] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:48,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [603495841] [2022-11-03 02:30:48,407 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:30:48,408 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:48,408 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:48,409 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:48,415 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-03 02:30:48,753 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:30:48,753 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:30:48,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-03 02:30:48,759 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:49,123 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:30:49,177 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:49,179 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:30:49,179 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-03 02:30:49,204 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 6 proven. 21 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:30:49,204 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:49,236 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:30:49,239 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:30:49,714 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 11 proven. 16 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:30:49,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [603495841] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:49,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [733562989] [2022-11-03 02:30:49,715 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:30:49,715 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:49,715 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:49,715 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:49,716 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:49,757 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:49,760 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:49,761 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:49,841 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:49,893 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:49,923 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:49,975 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:50,028 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:50,065 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:50,086 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:50,130 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:50,197 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:50,198 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:50,344 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:30:50,345 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:30:50,430 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:50,430 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:50,537 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:50,537 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:50,585 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:53,883 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18107#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:53,883 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:53,884 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:53,884 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 14, 14] total 38 [2022-11-03 02:30:53,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1541728518] [2022-11-03 02:30:53,884 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:53,884 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-11-03 02:30:53,884 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:53,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-11-03 02:30:53,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=248, Invalid=2404, Unknown=0, NotChecked=0, Total=2652 [2022-11-03 02:30:53,885 INFO L87 Difference]: Start difference. First operand 300 states and 354 transitions. Second operand has 38 states, 38 states have (on average 2.1842105263157894) internal successors, (83), 38 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:56,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:56,090 INFO L93 Difference]: Finished difference Result 316 states and 368 transitions. [2022-11-03 02:30:56,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-03 02:30:56,091 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.1842105263157894) internal successors, (83), 38 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-03 02:30:56,091 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:56,092 INFO L225 Difference]: With dead ends: 316 [2022-11-03 02:30:56,092 INFO L226 Difference]: Without dead ends: 316 [2022-11-03 02:30:56,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1162 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=668, Invalid=4588, Unknown=0, NotChecked=0, Total=5256 [2022-11-03 02:30:56,093 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 129 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 882 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 958 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 882 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 39 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:56,093 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 159 Invalid, 958 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 882 Invalid, 0 Unknown, 39 Unchecked, 0.6s Time] [2022-11-03 02:30:56,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-11-03 02:30:56,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 314. [2022-11-03 02:30:56,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 311 states have (on average 1.180064308681672) internal successors, (367), 313 states have internal predecessors, (367), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:56,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 367 transitions. [2022-11-03 02:30:56,100 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 367 transitions. Word has length 39 [2022-11-03 02:30:56,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:56,100 INFO L495 AbstractCegarLoop]: Abstraction has 314 states and 367 transitions. [2022-11-03 02:30:56,100 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.1842105263157894) internal successors, (83), 38 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:56,100 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 367 transitions. [2022-11-03 02:30:56,101 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-03 02:30:56,101 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:56,101 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:56,139 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:56,322 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-03 02:30:56,322 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:56,323 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:56,323 INFO L85 PathProgramCache]: Analyzing trace with hash -2123911204, now seen corresponding path program 7 times [2022-11-03 02:30:56,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:56,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649120844] [2022-11-03 02:30:56,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:56,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:56,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:56,995 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 9 proven. 38 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:30:56,995 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:56,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649120844] [2022-11-03 02:30:56,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649120844] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:56,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1611600326] [2022-11-03 02:30:56,995 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:30:56,996 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:56,996 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:56,996 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:56,998 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-03 02:30:57,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:57,169 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-03 02:30:57,172 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:57,624 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:30:57,942 INFO L356 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-11-03 02:30:57,942 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-11-03 02:30:57,978 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 7 proven. 34 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-03 02:30:57,979 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:58,227 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-03 02:30:58,234 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:30:58,235 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 44 treesize of output 34 [2022-11-03 02:30:58,862 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 16 proven. 25 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-11-03 02:30:58,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1611600326] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:58,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1702077823] [2022-11-03 02:30:58,863 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:30:58,863 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:58,863 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:58,864 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:58,864 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:58,919 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:58,922 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:58,922 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:58,957 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:59,001 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,026 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,092 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,138 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,178 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,199 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,244 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:59,286 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:59,286 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:59,431 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:30:59,432 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:30:59,503 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:59,504 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:59,603 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:30:59,603 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:30:59,652 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:31:03,239 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19071#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:31:03,239 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:31:03,239 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:31:03,239 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 18] total 50 [2022-11-03 02:31:03,240 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1825497670] [2022-11-03 02:31:03,240 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:31:03,240 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-03 02:31:03,240 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:31:03,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-03 02:31:03,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=317, Invalid=3715, Unknown=0, NotChecked=0, Total=4032 [2022-11-03 02:31:03,241 INFO L87 Difference]: Start difference. First operand 314 states and 367 transitions. Second operand has 50 states, 50 states have (on average 1.88) internal successors, (94), 50 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:08,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:31:08,167 INFO L93 Difference]: Finished difference Result 378 states and 432 transitions. [2022-11-03 02:31:08,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-03 02:31:08,168 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 1.88) internal successors, (94), 50 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-03 02:31:08,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:31:08,169 INFO L225 Difference]: With dead ends: 378 [2022-11-03 02:31:08,169 INFO L226 Difference]: Without dead ends: 359 [2022-11-03 02:31:08,170 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 69 SyntacticMatches, 1 SemanticMatches, 113 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3391 ImplicationChecksByTransitivity, 8.8s TimeCoverageRelationStatistics Valid=1483, Invalid=11627, Unknown=0, NotChecked=0, Total=13110 [2022-11-03 02:31:08,170 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 127 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 1668 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 1717 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 1668 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 8 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:31:08,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 275 Invalid, 1717 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 1668 Invalid, 0 Unknown, 8 Unchecked, 1.1s Time] [2022-11-03 02:31:08,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2022-11-03 02:31:08,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 310. [2022-11-03 02:31:08,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 310 states, 307 states have (on average 1.1726384364820848) internal successors, (360), 309 states have internal predecessors, (360), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:08,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 360 transitions. [2022-11-03 02:31:08,177 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 360 transitions. Word has length 39 [2022-11-03 02:31:08,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:31:08,177 INFO L495 AbstractCegarLoop]: Abstraction has 310 states and 360 transitions. [2022-11-03 02:31:08,177 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 1.88) internal successors, (94), 50 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:08,178 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 360 transitions. [2022-11-03 02:31:08,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-03 02:31:08,179 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:31:08,179 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:31:08,206 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Ended with exit code 0 [2022-11-03 02:31:08,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-03 02:31:08,386 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:31:08,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:31:08,387 INFO L85 PathProgramCache]: Analyzing trace with hash 1835991054, now seen corresponding path program 10 times [2022-11-03 02:31:08,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:31:08,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1178012569] [2022-11-03 02:31:08,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:31:08,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:31:08,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:31:09,466 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 36 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:09,466 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:31:09,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1178012569] [2022-11-03 02:31:09,466 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1178012569] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:31:09,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [950434777] [2022-11-03 02:31:09,467 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:31:09,467 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:31:09,467 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:31:09,468 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:31:09,469 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-03 02:31:09,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:31:09,638 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-03 02:31:09,640 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:31:10,189 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:12,071 INFO L356 Elim1Store]: treesize reduction 37, result has 58.4 percent of original size [2022-11-03 02:31:12,071 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 86 [2022-11-03 02:31:12,075 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-03 02:31:12,147 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 8 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:12,148 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:31:13,584 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-03 02:31:13,597 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 183 treesize of output 153 [2022-11-03 02:31:13,603 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-03 02:31:15,144 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 64 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:15,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [950434777] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:31:15,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1628370903] [2022-11-03 02:31:15,145 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:31:15,145 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:31:15,146 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:31:15,146 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:31:15,146 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:31:15,176 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:15,178 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:15,179 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:31:15,223 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:31:15,267 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:15,302 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:15,352 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:15,412 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:31:15,413 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:31:15,473 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:31:17,799 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20181#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:31:17,799 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:31:17,799 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:31:17,800 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 30, 30] total 78 [2022-11-03 02:31:17,800 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [20468928] [2022-11-03 02:31:17,800 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:31:17,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 78 states [2022-11-03 02:31:17,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:31:17,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 78 interpolants. [2022-11-03 02:31:17,801 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=550, Invalid=6932, Unknown=0, NotChecked=0, Total=7482 [2022-11-03 02:31:17,802 INFO L87 Difference]: Start difference. First operand 310 states and 360 transitions. Second operand has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:22,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:31:22,880 INFO L93 Difference]: Finished difference Result 423 states and 490 transitions. [2022-11-03 02:31:22,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-11-03 02:31:22,880 INFO L78 Accepts]: Start accepts. Automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-03 02:31:22,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:31:22,882 INFO L225 Difference]: With dead ends: 423 [2022-11-03 02:31:22,882 INFO L226 Difference]: Without dead ends: 387 [2022-11-03 02:31:22,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 182 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 130 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4556 ImplicationChecksByTransitivity, 11.5s TimeCoverageRelationStatistics Valid=1465, Invalid=15827, Unknown=0, NotChecked=0, Total=17292 [2022-11-03 02:31:22,883 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 200 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 916 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 1240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 916 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 289 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:31:22,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 166 Invalid, 1240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 916 Invalid, 0 Unknown, 289 Unchecked, 0.6s Time] [2022-11-03 02:31:22,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2022-11-03 02:31:22,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 347. [2022-11-03 02:31:22,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 344 states have (on average 1.177325581395349) internal successors, (405), 346 states have internal predecessors, (405), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:22,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 405 transitions. [2022-11-03 02:31:22,891 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 405 transitions. Word has length 39 [2022-11-03 02:31:22,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:31:22,891 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 405 transitions. [2022-11-03 02:31:22,891 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:22,891 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 405 transitions. [2022-11-03 02:31:22,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-03 02:31:22,892 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:31:22,892 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:31:22,942 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-03 02:31:23,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-03 02:31:23,111 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:31:23,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:31:23,111 INFO L85 PathProgramCache]: Analyzing trace with hash -735449305, now seen corresponding path program 8 times [2022-11-03 02:31:23,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:31:23,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1419508505] [2022-11-03 02:31:23,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:31:23,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:31:23,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:31:24,313 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:24,313 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:31:24,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1419508505] [2022-11-03 02:31:24,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1419508505] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:31:24,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [207742697] [2022-11-03 02:31:24,314 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:31:24,314 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:31:24,314 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:31:24,315 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:31:24,327 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-03 02:31:24,654 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:31:24,654 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:31:24,658 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 115 conjunts are in the unsatisfiable core [2022-11-03 02:31:24,661 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:31:24,674 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:31:25,303 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:25,379 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:31:25,585 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:31:25,776 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:31:25,971 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:31:26,121 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:31:26,122 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:31:26,123 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-03 02:31:26,127 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 12 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:26,127 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:31:26,139 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1627 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1627) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:31:26,147 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1627 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1627) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:31:26,155 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1626 (Array Int Int)) (v_ArrVal_1627 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1626) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1627) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:31:26,166 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1627 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1627) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:31:26,174 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1625 (Array Int Int)) (v_ArrVal_1627 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1625) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1627) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:31:26,187 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1627 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1627) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:31:26,255 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:31:26,255 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:31:26,262 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:31:26,262 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:31:26,265 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:31:26,999 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 23 not checked. [2022-11-03 02:31:26,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [207742697] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:31:26,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1626171628] [2022-11-03 02:31:27,000 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:31:27,000 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:31:27,001 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:31:27,001 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:31:27,001 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:31:27,032 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:27,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:27,035 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:31:27,073 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,114 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,136 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,199 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:31:27,248 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,291 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,314 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,353 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:27,400 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:31:27,400 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:31:27,485 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:31:27,487 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:31:27,538 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:31:27,538 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:31:27,640 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:31:27,641 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:31:27,748 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:31:27,749 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:31:27,799 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:31:31,737 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21345#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:31:31,737 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:31:31,737 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:31:31,737 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 22, 22] total 61 [2022-11-03 02:31:31,737 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1785987467] [2022-11-03 02:31:31,737 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:31:31,738 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-03 02:31:31,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:31:31,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-03 02:31:31,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=363, Invalid=4347, Unknown=6, NotChecked=834, Total=5550 [2022-11-03 02:31:31,739 INFO L87 Difference]: Start difference. First operand 347 states and 405 transitions. Second operand has 61 states, 61 states have (on average 1.7540983606557377) internal successors, (107), 61 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:34,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:31:34,929 INFO L93 Difference]: Finished difference Result 525 states and 611 transitions. [2022-11-03 02:31:34,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-03 02:31:34,929 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 61 states have (on average 1.7540983606557377) internal successors, (107), 61 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-03 02:31:34,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:31:34,932 INFO L225 Difference]: With dead ends: 525 [2022-11-03 02:31:34,932 INFO L226 Difference]: Without dead ends: 465 [2022-11-03 02:31:34,933 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 70 SyntacticMatches, 11 SemanticMatches, 109 ConstructedPredicates, 6 IntricatePredicates, 5 DeprecatedPredicates, 3182 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=942, Invalid=9996, Unknown=6, NotChecked=1266, Total=12210 [2022-11-03 02:31:34,933 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 255 mSDsluCounter, 379 mSDsCounter, 0 mSdLazyCounter, 922 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 1765 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 922 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 732 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:31:34,933 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 380 Invalid, 1765 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 922 Invalid, 0 Unknown, 732 Unchecked, 0.6s Time] [2022-11-03 02:31:34,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 465 states. [2022-11-03 02:31:34,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 465 to 438. [2022-11-03 02:31:34,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 438 states, 435 states have (on average 1.181609195402299) internal successors, (514), 437 states have internal predecessors, (514), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:34,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 438 states to 438 states and 514 transitions. [2022-11-03 02:31:34,941 INFO L78 Accepts]: Start accepts. Automaton has 438 states and 514 transitions. Word has length 40 [2022-11-03 02:31:34,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:31:34,941 INFO L495 AbstractCegarLoop]: Abstraction has 438 states and 514 transitions. [2022-11-03 02:31:34,942 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 61 states have (on average 1.7540983606557377) internal successors, (107), 61 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:34,942 INFO L276 IsEmpty]: Start isEmpty. Operand 438 states and 514 transitions. [2022-11-03 02:31:34,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-03 02:31:34,943 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:31:34,943 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:31:34,974 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-03 02:31:35,154 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-03 02:31:35,154 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:31:35,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:31:35,155 INFO L85 PathProgramCache]: Analyzing trace with hash -308079726, now seen corresponding path program 8 times [2022-11-03 02:31:35,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:31:35,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102297737] [2022-11-03 02:31:35,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:31:35,155 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:31:35,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:31:35,965 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:31:35,965 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:31:35,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102297737] [2022-11-03 02:31:35,965 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102297737] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:31:35,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1554727384] [2022-11-03 02:31:35,965 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:31:35,966 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:31:35,966 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:31:35,967 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:31:35,988 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-03 02:31:36,364 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:31:36,364 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:31:36,367 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-03 02:31:36,368 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:31:36,606 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:45,927 INFO L356 Elim1Store]: treesize reduction 12, result has 87.6 percent of original size [2022-11-03 02:31:45,927 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 42 treesize of output 103 [2022-11-03 02:31:46,908 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 7 proven. 33 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:31:46,909 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:31:48,373 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 53 treesize of output 45 [2022-11-03 02:31:48,417 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:31:48,417 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 85 treesize of output 125 [2022-11-03 02:31:48,737 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 35 [2022-11-03 02:31:49,290 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 36 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:31:49,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1554727384] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:31:49,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1653109991] [2022-11-03 02:31:49,292 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:31:49,292 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:31:49,292 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:31:49,292 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:31:49,292 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:31:49,338 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:49,341 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:49,342 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:31:49,388 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,435 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,459 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,518 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,576 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,618 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,647 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,710 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:49,788 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:31:49,789 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:31:49,955 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:31:49,955 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:31:50,044 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:31:50,045 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:31:50,160 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:31:50,160 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:31:50,230 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:31:54,661 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22713#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:31:54,661 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:31:54,662 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:31:54,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 19] total 55 [2022-11-03 02:31:54,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1867833314] [2022-11-03 02:31:54,662 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:31:54,662 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-11-03 02:31:54,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:31:54,663 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-11-03 02:31:54,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=337, Invalid=4489, Unknown=4, NotChecked=0, Total=4830 [2022-11-03 02:31:54,663 INFO L87 Difference]: Start difference. First operand 438 states and 514 transitions. Second operand has 56 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 56 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:05,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:05,008 INFO L93 Difference]: Finished difference Result 530 states and 613 transitions. [2022-11-03 02:32:05,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 88 states. [2022-11-03 02:32:05,009 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 56 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-03 02:32:05,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:05,011 INFO L225 Difference]: With dead ends: 530 [2022-11-03 02:32:05,012 INFO L226 Difference]: Without dead ends: 460 [2022-11-03 02:32:05,013 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 218 GetRequests, 78 SyntacticMatches, 1 SemanticMatches, 139 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4994 ImplicationChecksByTransitivity, 25.0s TimeCoverageRelationStatistics Valid=1882, Invalid=17854, Unknown=4, NotChecked=0, Total=19740 [2022-11-03 02:32:05,014 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 104 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 1508 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 135 SdHoareTripleChecker+Invalid, 1632 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 1508 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 91 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:05,014 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 135 Invalid, 1632 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 1508 Invalid, 0 Unknown, 91 Unchecked, 1.2s Time] [2022-11-03 02:32:05,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 460 states. [2022-11-03 02:32:05,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 460 to 381. [2022-11-03 02:32:05,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 378 states have (on average 1.1719576719576719) internal successors, (443), 380 states have internal predecessors, (443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:05,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 443 transitions. [2022-11-03 02:32:05,023 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 443 transitions. Word has length 43 [2022-11-03 02:32:05,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:05,023 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 443 transitions. [2022-11-03 02:32:05,023 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 56 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:05,023 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 443 transitions. [2022-11-03 02:32:05,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-03 02:32:05,024 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:05,025 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:05,078 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:05,250 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:05,250 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:05,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:05,251 INFO L85 PathProgramCache]: Analyzing trace with hash 159815876, now seen corresponding path program 11 times [2022-11-03 02:32:05,251 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:05,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1343692168] [2022-11-03 02:32:05,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:05,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:05,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:06,601 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 49 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:06,601 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:06,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1343692168] [2022-11-03 02:32:06,601 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1343692168] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:06,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1665993961] [2022-11-03 02:32:06,602 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:32:06,602 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:06,602 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:06,603 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:06,604 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-03 02:32:06,993 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-03 02:32:06,993 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:32:06,997 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 97 conjunts are in the unsatisfiable core [2022-11-03 02:32:06,999 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:07,702 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:09,806 INFO L356 Elim1Store]: treesize reduction 37, result has 49.3 percent of original size [2022-11-03 02:32:09,808 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 45 case distinctions, treesize of input 98 treesize of output 74 [2022-11-03 02:32:09,813 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-03 02:32:09,893 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 9 proven. 153 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:09,893 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:11,826 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 116 [2022-11-03 02:32:11,841 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 36 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 100 [2022-11-03 02:32:14,674 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-11-03 02:32:14,680 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 81 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:14,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1665993961] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:14,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1504472192] [2022-11-03 02:32:14,681 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:32:14,682 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:14,682 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:14,682 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:14,682 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:14,726 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:14,729 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:14,730 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:14,770 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:14,833 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:14,856 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:14,911 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:14,959 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:32:14,959 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:32:15,018 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:17,574 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24119#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:17,574 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:17,575 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:17,575 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 33, 33] total 86 [2022-11-03 02:32:17,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235326703] [2022-11-03 02:32:17,575 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:17,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 86 states [2022-11-03 02:32:17,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:17,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 86 interpolants. [2022-11-03 02:32:17,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=650, Invalid=8280, Unknown=0, NotChecked=0, Total=8930 [2022-11-03 02:32:17,577 INFO L87 Difference]: Start difference. First operand 381 states and 443 transitions. Second operand has 86 states, 86 states have (on average 1.4534883720930232) internal successors, (125), 86 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:23,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:23,729 INFO L93 Difference]: Finished difference Result 563 states and 660 transitions. [2022-11-03 02:32:23,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2022-11-03 02:32:23,729 INFO L78 Accepts]: Start accepts. Automaton has has 86 states, 86 states have (on average 1.4534883720930232) internal successors, (125), 86 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-03 02:32:23,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:23,731 INFO L225 Difference]: With dead ends: 563 [2022-11-03 02:32:23,731 INFO L226 Difference]: Without dead ends: 543 [2022-11-03 02:32:23,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5436 ImplicationChecksByTransitivity, 14.4s TimeCoverageRelationStatistics Valid=1671, Invalid=18635, Unknown=0, NotChecked=0, Total=20306 [2022-11-03 02:32:23,734 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 174 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 1049 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 1287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1049 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 187 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:23,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 152 Invalid, 1287 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1049 Invalid, 0 Unknown, 187 Unchecked, 0.8s Time] [2022-11-03 02:32:23,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 543 states. [2022-11-03 02:32:23,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 543 to 481. [2022-11-03 02:32:23,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 481 states, 478 states have (on average 1.1799163179916319) internal successors, (564), 480 states have internal predecessors, (564), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:23,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 481 states to 481 states and 564 transitions. [2022-11-03 02:32:23,743 INFO L78 Accepts]: Start accepts. Automaton has 481 states and 564 transitions. Word has length 43 [2022-11-03 02:32:23,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:23,744 INFO L495 AbstractCegarLoop]: Abstraction has 481 states and 564 transitions. [2022-11-03 02:32:23,744 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 86 states, 86 states have (on average 1.4534883720930232) internal successors, (125), 86 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:23,744 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 564 transitions. [2022-11-03 02:32:23,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-03 02:32:23,745 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:23,746 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:23,780 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:23,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable51 [2022-11-03 02:32:23,961 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:23,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:23,961 INFO L85 PathProgramCache]: Analyzing trace with hash 1448059287, now seen corresponding path program 9 times [2022-11-03 02:32:23,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:23,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [521564264] [2022-11-03 02:32:23,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:23,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:23,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:24,518 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:32:24,519 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:24,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [521564264] [2022-11-03 02:32:24,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [521564264] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:24,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [897557542] [2022-11-03 02:32:24,519 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:32:24,519 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:24,519 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:24,521 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:24,538 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-03 02:32:25,050 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:32:25,050 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:32:25,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-03 02:32:25,056 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:25,342 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:32:25,343 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:25,661 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:32:25,768 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:32:25,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [897557542] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:25,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1383560898] [2022-11-03 02:32:25,769 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:32:25,769 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:25,769 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:25,770 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:25,770 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:25,808 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:25,811 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:25,812 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:25,855 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:25,896 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:25,923 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:25,984 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:26,054 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:26,098 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:26,124 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:26,180 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:26,236 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:32:26,237 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:32:26,336 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:32:26,338 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:32:26,401 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:32:26,401 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:32:26,536 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:32:26,537 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:32:26,637 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:32:26,638 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:32:26,694 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:30,226 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25557#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:30,226 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:30,227 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:30,227 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-11-03 02:32:30,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24106608] [2022-11-03 02:32:30,227 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:30,228 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-03 02:32:30,228 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:30,228 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-03 02:32:30,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1786, Unknown=0, NotChecked=0, Total=1980 [2022-11-03 02:32:30,229 INFO L87 Difference]: Start difference. First operand 481 states and 564 transitions. Second operand has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:31,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:31,303 INFO L93 Difference]: Finished difference Result 514 states and 588 transitions. [2022-11-03 02:32:31,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-03 02:32:31,304 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-03 02:32:31,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:31,306 INFO L225 Difference]: With dead ends: 514 [2022-11-03 02:32:31,306 INFO L226 Difference]: Without dead ends: 514 [2022-11-03 02:32:31,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 96 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 894 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=497, Invalid=3163, Unknown=0, NotChecked=0, Total=3660 [2022-11-03 02:32:31,307 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 293 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 821 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 857 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 821 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:31,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 234 Invalid, 857 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 821 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:32:31,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 514 states. [2022-11-03 02:32:31,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 514 to 486. [2022-11-03 02:32:31,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 483 states have (on average 1.1780538302277432) internal successors, (569), 485 states have internal predecessors, (569), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:31,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 569 transitions. [2022-11-03 02:32:31,317 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 569 transitions. Word has length 44 [2022-11-03 02:32:31,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:31,317 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 569 transitions. [2022-11-03 02:32:31,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:31,317 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 569 transitions. [2022-11-03 02:32:31,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 02:32:31,319 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:31,319 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:31,358 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:31,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:31,546 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:31,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:31,547 INFO L85 PathProgramCache]: Analyzing trace with hash 84150912, now seen corresponding path program 9 times [2022-11-03 02:32:31,547 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:31,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891410388] [2022-11-03 02:32:31,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:31,547 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:31,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:32,904 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 4 proven. 75 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:32,905 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:32,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891410388] [2022-11-03 02:32:32,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891410388] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:32,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [835452125] [2022-11-03 02:32:32,905 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:32:32,906 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:32,906 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:32,907 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:32,908 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-03 02:32:33,329 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:32:33,329 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:32:33,334 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-03 02:32:33,335 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:33,960 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:34,026 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:32:34,028 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:32:34,028 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:32:34,060 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 11 proven. 32 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-03 02:32:34,060 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:34,102 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:32:34,105 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:32:34,825 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 18 proven. 25 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-03 02:32:34,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [835452125] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:34,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [508290606] [2022-11-03 02:32:34,827 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:32:34,827 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:34,828 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:34,828 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:34,828 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:34,872 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:34,874 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:34,875 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:34,905 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:34,964 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:35,001 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:35,071 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:32:35,071 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-03 02:32:35,150 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:35,196 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:35,251 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:35,318 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:32:35,318 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:32:35,505 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:32:35,505 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:32:35,583 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:32:35,583 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:32:35,693 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:32:35,694 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:32:35,765 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:39,521 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '26927#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:39,521 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:39,521 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:39,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 16, 16] total 48 [2022-11-03 02:32:39,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [291424431] [2022-11-03 02:32:39,522 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:39,522 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-03 02:32:39,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:39,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-03 02:32:39,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=360, Invalid=3422, Unknown=0, NotChecked=0, Total=3782 [2022-11-03 02:32:39,523 INFO L87 Difference]: Start difference. First operand 486 states and 569 transitions. Second operand has 48 states, 48 states have (on average 2.1458333333333335) internal successors, (103), 48 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:42,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:42,492 INFO L93 Difference]: Finished difference Result 507 states and 588 transitions. [2022-11-03 02:32:42,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-03 02:32:42,493 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.1458333333333335) internal successors, (103), 48 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-03 02:32:42,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:42,494 INFO L225 Difference]: With dead ends: 507 [2022-11-03 02:32:42,495 INFO L226 Difference]: Without dead ends: 507 [2022-11-03 02:32:42,495 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1699 ImplicationChecksByTransitivity, 7.7s TimeCoverageRelationStatistics Valid=868, Invalid=6104, Unknown=0, NotChecked=0, Total=6972 [2022-11-03 02:32:42,495 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 136 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 1024 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 1076 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1024 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:42,496 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 113 Invalid, 1076 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1024 Invalid, 0 Unknown, 1 Unchecked, 0.8s Time] [2022-11-03 02:32:42,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 507 states. [2022-11-03 02:32:42,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 507 to 504. [2022-11-03 02:32:42,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 504 states, 501 states have (on average 1.1696606786427146) internal successors, (586), 503 states have internal predecessors, (586), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:42,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 504 states to 504 states and 586 transitions. [2022-11-03 02:32:42,503 INFO L78 Accepts]: Start accepts. Automaton has 504 states and 586 transitions. Word has length 47 [2022-11-03 02:32:42,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:42,504 INFO L495 AbstractCegarLoop]: Abstraction has 504 states and 586 transitions. [2022-11-03 02:32:42,504 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.1458333333333335) internal successors, (103), 48 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:42,504 INFO L276 IsEmpty]: Start isEmpty. Operand 504 states and 586 transitions. [2022-11-03 02:32:42,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 02:32:42,506 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:42,506 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:42,555 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:42,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable53,43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:42,722 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:42,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:42,723 INFO L85 PathProgramCache]: Analyzing trace with hash 1048591780, now seen corresponding path program 10 times [2022-11-03 02:32:42,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:42,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677094016] [2022-11-03 02:32:42,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:42,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:42,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:43,554 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 16 proven. 53 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:32:43,555 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:43,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677094016] [2022-11-03 02:32:43,555 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677094016] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:43,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1896338513] [2022-11-03 02:32:43,555 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:32:43,555 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:43,555 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:43,556 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:43,574 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-03 02:32:43,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:43,806 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-03 02:32:43,808 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:44,424 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:44,925 INFO L356 Elim1Store]: treesize reduction 17, result has 50.0 percent of original size [2022-11-03 02:32:44,925 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 31 [2022-11-03 02:32:44,967 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 10 proven. 47 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:32:44,967 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:45,250 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-03 02:32:45,257 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 58 [2022-11-03 02:32:46,300 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 21 proven. 36 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:32:46,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1896338513] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:46,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2069221220] [2022-11-03 02:32:46,301 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:32:46,302 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:46,302 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:46,302 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:46,302 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:46,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:46,342 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:46,343 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:46,381 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:46,425 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,455 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,516 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:32:46,570 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,602 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,782 INFO L356 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-03 02:32:46,782 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-03 02:32:46,988 INFO L356 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-03 02:32:46,988 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-03 02:32:47,612 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:32:47,612 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:32:47,701 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:32:47,702 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:32:47,803 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:32:47,803 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:32:47,858 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:52,357 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28327#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:52,357 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:52,358 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:52,358 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 20] total 55 [2022-11-03 02:32:52,358 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685128284] [2022-11-03 02:32:52,358 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:52,359 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-03 02:32:52,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:52,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-03 02:32:52,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=342, Invalid=4350, Unknown=0, NotChecked=0, Total=4692 [2022-11-03 02:32:52,360 INFO L87 Difference]: Start difference. First operand 504 states and 586 transitions. Second operand has 55 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 55 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:02,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:33:02,472 INFO L93 Difference]: Finished difference Result 619 states and 704 transitions. [2022-11-03 02:33:02,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 84 states. [2022-11-03 02:33:02,472 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 55 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-03 02:33:02,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:33:02,474 INFO L225 Difference]: With dead ends: 619 [2022-11-03 02:33:02,474 INFO L226 Difference]: Without dead ends: 596 [2022-11-03 02:33:02,475 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 140 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5115 ImplicationChecksByTransitivity, 15.0s TimeCoverageRelationStatistics Valid=2394, Invalid=17628, Unknown=0, NotChecked=0, Total=20022 [2022-11-03 02:33:02,475 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 187 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 2423 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 2477 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 2423 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 8 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:33:02,476 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 287 Invalid, 2477 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 2423 Invalid, 0 Unknown, 8 Unchecked, 1.7s Time] [2022-11-03 02:33:02,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 596 states. [2022-11-03 02:33:02,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 596 to 500. [2022-11-03 02:33:02,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 500 states, 497 states have (on average 1.1629778672032194) internal successors, (578), 499 states have internal predecessors, (578), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:02,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 500 states to 500 states and 578 transitions. [2022-11-03 02:33:02,483 INFO L78 Accepts]: Start accepts. Automaton has 500 states and 578 transitions. Word has length 47 [2022-11-03 02:33:02,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:33:02,483 INFO L495 AbstractCegarLoop]: Abstraction has 500 states and 578 transitions. [2022-11-03 02:33:02,483 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 55 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:02,483 INFO L276 IsEmpty]: Start isEmpty. Operand 500 states and 578 transitions. [2022-11-03 02:33:02,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 02:33:02,484 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:33:02,485 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:33:02,522 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-03 02:33:02,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-11-03 02:33:02,699 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:33:02,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:33:02,699 INFO L85 PathProgramCache]: Analyzing trace with hash -1649629830, now seen corresponding path program 12 times [2022-11-03 02:33:02,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:33:02,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1348158445] [2022-11-03 02:33:02,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:33:02,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:33:02,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:04,052 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 64 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:04,053 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:33:04,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1348158445] [2022-11-03 02:33:04,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1348158445] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:33:04,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [949881523] [2022-11-03 02:33:04,054 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:33:04,054 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:04,054 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:33:04,058 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:33:04,059 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-03 02:33:04,316 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:33:04,316 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:33:04,320 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 101 conjunts are in the unsatisfiable core [2022-11-03 02:33:04,323 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:33:05,233 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:08,169 INFO L356 Elim1Store]: treesize reduction 41, result has 49.4 percent of original size [2022-11-03 02:33:08,170 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 45 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 55 case distinctions, treesize of input 108 treesize of output 82 [2022-11-03 02:33:08,180 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-11-03 02:33:08,281 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 10 proven. 190 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:08,281 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:33:11,139 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 129 [2022-11-03 02:33:11,160 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 10 select indices, 10 select index equivalence classes, 45 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 111 [2022-11-03 02:33:14,907 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-11-03 02:33:14,923 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 100 proven. 100 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:14,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [949881523] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:33:14,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [993331033] [2022-11-03 02:33:14,924 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:33:14,924 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:33:14,924 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:33:14,924 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:33:14,924 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:33:14,970 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:14,972 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:14,973 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:33:15,016 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:15,075 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:15,103 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:15,159 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:15,211 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:33:15,212 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:33:15,272 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:33:18,189 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29976#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:33:18,190 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:33:18,190 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:33:18,190 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 36, 36] total 94 [2022-11-03 02:33:18,190 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748196402] [2022-11-03 02:33:18,190 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:33:18,193 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 94 states [2022-11-03 02:33:18,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:33:18,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 94 interpolants. [2022-11-03 02:33:18,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=747, Invalid=9759, Unknown=0, NotChecked=0, Total=10506 [2022-11-03 02:33:18,194 INFO L87 Difference]: Start difference. First operand 500 states and 578 transitions. Second operand has 94 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 94 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:27,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:33:27,872 INFO L93 Difference]: Finished difference Result 676 states and 786 transitions. [2022-11-03 02:33:27,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 84 states. [2022-11-03 02:33:27,872 INFO L78 Accepts]: Start accepts. Automaton has has 94 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 94 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-03 02:33:27,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:33:27,875 INFO L225 Difference]: With dead ends: 676 [2022-11-03 02:33:27,876 INFO L226 Difference]: Without dead ends: 654 [2022-11-03 02:33:27,877 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6260 ImplicationChecksByTransitivity, 20.3s TimeCoverageRelationStatistics Valid=1982, Invalid=22510, Unknown=0, NotChecked=0, Total=24492 [2022-11-03 02:33:27,877 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 303 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 1395 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 1822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 1395 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 360 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:33:27,877 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 172 Invalid, 1822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 1395 Invalid, 0 Unknown, 360 Unchecked, 1.3s Time] [2022-11-03 02:33:27,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 654 states. [2022-11-03 02:33:27,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 654 to 600. [2022-11-03 02:33:27,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 600 states, 597 states have (on average 1.1758793969849246) internal successors, (702), 599 states have internal predecessors, (702), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:27,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 600 states to 600 states and 702 transitions. [2022-11-03 02:33:27,888 INFO L78 Accepts]: Start accepts. Automaton has 600 states and 702 transitions. Word has length 47 [2022-11-03 02:33:27,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:33:27,888 INFO L495 AbstractCegarLoop]: Abstraction has 600 states and 702 transitions. [2022-11-03 02:33:27,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 94 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 94 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:27,889 INFO L276 IsEmpty]: Start isEmpty. Operand 600 states and 702 transitions. [2022-11-03 02:33:27,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-03 02:33:27,890 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:33:27,891 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:33:27,932 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Forceful destruction successful, exit code 0 [2022-11-03 02:33:28,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable55 [2022-11-03 02:33:28,110 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:33:28,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:33:28,111 INFO L85 PathProgramCache]: Analyzing trace with hash 2079666015, now seen corresponding path program 10 times [2022-11-03 02:33:28,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:33:28,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745481808] [2022-11-03 02:33:28,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:33:28,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:33:28,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:29,722 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 10 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:29,723 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:33:29,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [745481808] [2022-11-03 02:33:29,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [745481808] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:33:29,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [761361813] [2022-11-03 02:33:29,723 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:33:29,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:29,723 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:33:29,726 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:33:29,727 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-03 02:33:29,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:29,952 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 108 conjunts are in the unsatisfiable core [2022-11-03 02:33:29,956 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:33:29,966 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:33:30,707 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:30,822 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:33:31,005 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:33:31,113 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:33:31,182 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:33:31,199 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:33:31,207 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:33:31,210 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 19 proven. 72 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:31,210 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:33:31,222 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2096 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-11-03 02:33:31,228 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2096 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,236 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2096 (Array Int Int)) (v_ArrVal_2095 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2095) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,243 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2096 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,250 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2094 (Array Int Int)) (v_ArrVal_2096 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2094) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,258 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2096 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,265 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2093 (Array Int Int)) (v_ArrVal_2096 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2093) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,272 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2096 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2096) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-11-03 02:33:31,348 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:33:31,348 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:33:31,354 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:33:31,355 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:33:32,295 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 26 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 39 not checked. [2022-11-03 02:33:32,295 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [761361813] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:33:32,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1877562069] [2022-11-03 02:33:32,296 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:33:32,296 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:33:32,296 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:33:32,296 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:33:32,297 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:33:32,330 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:32,332 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:32,333 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:33:32,366 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:32,401 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:32,430 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:32,488 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:33:32,531 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:32,558 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:32,699 INFO L356 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-03 02:33:32,700 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-03 02:33:32,857 INFO L356 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-03 02:33:32,857 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-03 02:33:33,859 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:33:33,962 INFO L356 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-11-03 02:33:33,962 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1041 [2022-11-03 02:33:35,474 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:33:35,475 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:33:35,580 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:33:35,581 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:33:35,657 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:33:40,503 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31719#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:33:40,504 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:33:40,504 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:33:40,504 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 26, 26] total 68 [2022-11-03 02:33:40,504 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126565664] [2022-11-03 02:33:40,504 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:33:40,505 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-03 02:33:40,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:33:40,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-03 02:33:40,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=433, Invalid=4993, Unknown=8, NotChecked=1208, Total=6642 [2022-11-03 02:33:40,506 INFO L87 Difference]: Start difference. First operand 600 states and 702 transitions. Second operand has 68 states, 68 states have (on average 1.8235294117647058) internal successors, (124), 68 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:44,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:33:44,513 INFO L93 Difference]: Finished difference Result 825 states and 967 transitions. [2022-11-03 02:33:44,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-03 02:33:44,514 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 68 states have (on average 1.8235294117647058) internal successors, (124), 68 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-11-03 02:33:44,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:33:44,515 INFO L225 Difference]: With dead ends: 825 [2022-11-03 02:33:44,515 INFO L226 Difference]: Without dead ends: 771 [2022-11-03 02:33:44,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 222 GetRequests, 91 SyntacticMatches, 14 SemanticMatches, 117 ConstructedPredicates, 8 IntricatePredicates, 0 DeprecatedPredicates, 3339 ImplicationChecksByTransitivity, 10.0s TimeCoverageRelationStatistics Valid=1135, Invalid=11099, Unknown=8, NotChecked=1800, Total=14042 [2022-11-03 02:33:44,516 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 481 mSDsluCounter, 573 mSDsCounter, 0 mSdLazyCounter, 1681 mSolverCounterSat, 163 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 590 SdHoareTripleChecker+Invalid, 3053 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 163 IncrementalHoareTripleChecker+Valid, 1681 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1209 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:33:44,516 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [481 Valid, 590 Invalid, 3053 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [163 Valid, 1681 Invalid, 0 Unknown, 1209 Unchecked, 1.1s Time] [2022-11-03 02:33:44,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 771 states. [2022-11-03 02:33:44,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 771 to 717. [2022-11-03 02:33:44,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 717 states, 714 states have (on average 1.1974789915966386) internal successors, (855), 716 states have internal predecessors, (855), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:44,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 717 states to 717 states and 855 transitions. [2022-11-03 02:33:44,527 INFO L78 Accepts]: Start accepts. Automaton has 717 states and 855 transitions. Word has length 48 [2022-11-03 02:33:44,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:33:44,527 INFO L495 AbstractCegarLoop]: Abstraction has 717 states and 855 transitions. [2022-11-03 02:33:44,527 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 68 states have (on average 1.8235294117647058) internal successors, (124), 68 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:44,528 INFO L276 IsEmpty]: Start isEmpty. Operand 717 states and 855 transitions. [2022-11-03 02:33:44,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:33:44,529 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:33:44,529 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 4, 4, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:33:44,566 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-11-03 02:33:44,754 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable56,46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:44,754 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:33:44,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:33:44,755 INFO L85 PathProgramCache]: Analyzing trace with hash -1385315, now seen corresponding path program 11 times [2022-11-03 02:33:44,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:33:44,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744483253] [2022-11-03 02:33:44,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:33:44,755 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:33:44,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:45,261 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 20 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:33:45,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:33:45,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1744483253] [2022-11-03 02:33:45,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1744483253] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:33:45,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1739338229] [2022-11-03 02:33:45,261 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:33:45,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:45,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:33:45,263 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:33:45,283 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-03 02:33:45,844 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:33:45,844 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:33:45,848 INFO L263 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-03 02:33:45,850 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:33:46,137 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:46,200 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:33:46,200 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-03 02:33:46,637 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 15 proven. 45 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:33:46,638 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:33:47,066 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:33:47,071 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-03 02:33:47,246 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 35 [2022-11-03 02:33:47,884 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:33:47,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1739338229] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:33:47,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1731628371] [2022-11-03 02:33:47,885 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:33:47,885 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:33:47,885 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:33:47,885 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:33:47,885 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:33:47,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:47,927 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:47,928 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:33:47,956 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:48,002 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:48,025 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:48,079 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:33:48,079 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-03 02:33:48,135 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:48,178 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:48,219 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:48,265 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:33:48,265 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:33:48,381 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:33:48,381 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:33:48,470 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:33:48,470 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:33:48,602 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:33:48,603 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:33:48,666 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:33:52,282 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33699#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:33:52,282 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:33:52,282 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:33:52,282 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 17] total 48 [2022-11-03 02:33:52,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849431125] [2022-11-03 02:33:52,282 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:33:52,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-03 02:33:52,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:33:52,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-03 02:33:52,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=316, Invalid=3590, Unknown=0, NotChecked=0, Total=3906 [2022-11-03 02:33:52,283 INFO L87 Difference]: Start difference. First operand 717 states and 855 transitions. Second operand has 49 states, 48 states have (on average 2.5208333333333335) internal successors, (121), 49 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:00,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:00,314 INFO L93 Difference]: Finished difference Result 833 states and 976 transitions. [2022-11-03 02:34:00,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2022-11-03 02:34:00,314 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.5208333333333335) internal successors, (121), 49 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-03 02:34:00,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:00,318 INFO L225 Difference]: With dead ends: 833 [2022-11-03 02:34:00,318 INFO L226 Difference]: Without dead ends: 808 [2022-11-03 02:34:00,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 142 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4659 ImplicationChecksByTransitivity, 11.7s TimeCoverageRelationStatistics Valid=2630, Invalid=17962, Unknown=0, NotChecked=0, Total=20592 [2022-11-03 02:34:00,319 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 209 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 2048 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 248 SdHoareTripleChecker+Invalid, 2140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 2048 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 10 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:00,319 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 248 Invalid, 2140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 2048 Invalid, 0 Unknown, 10 Unchecked, 1.3s Time] [2022-11-03 02:34:00,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 808 states. [2022-11-03 02:34:00,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 808 to 733. [2022-11-03 02:34:00,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 733 states, 730 states have (on average 1.1863013698630136) internal successors, (866), 732 states have internal predecessors, (866), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:00,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 733 states to 733 states and 866 transitions. [2022-11-03 02:34:00,327 INFO L78 Accepts]: Start accepts. Automaton has 733 states and 866 transitions. Word has length 49 [2022-11-03 02:34:00,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:00,327 INFO L495 AbstractCegarLoop]: Abstraction has 733 states and 866 transitions. [2022-11-03 02:34:00,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.5208333333333335) internal successors, (121), 49 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:00,328 INFO L276 IsEmpty]: Start isEmpty. Operand 733 states and 866 transitions. [2022-11-03 02:34:00,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-03 02:34:00,329 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:00,330 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:00,371 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:00,545 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-11-03 02:34:00,545 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:34:00,545 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:00,545 INFO L85 PathProgramCache]: Analyzing trace with hash -346173862, now seen corresponding path program 12 times [2022-11-03 02:34:00,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:00,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292068960] [2022-11-03 02:34:00,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:00,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:00,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:01,637 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 25 proven. 65 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:34:01,638 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:01,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292068960] [2022-11-03 02:34:01,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292068960] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:01,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [786176020] [2022-11-03 02:34:01,638 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:34:01,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:01,638 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:01,639 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:01,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-11-03 02:34:01,989 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:34:01,990 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:34:01,993 INFO L263 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 57 conjunts are in the unsatisfiable core [2022-11-03 02:34:01,995 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:02,589 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:03,179 INFO L356 Elim1Store]: treesize reduction 17, result has 48.5 percent of original size [2022-11-03 02:34:03,179 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 48 treesize of output 34 [2022-11-03 02:34:03,225 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 12 proven. 66 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:34:03,225 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:03,652 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-11-03 02:34:03,658 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 45 [2022-11-03 02:34:04,970 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 29 proven. 49 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:34:04,971 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [786176020] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:04,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1891009444] [2022-11-03 02:34:04,972 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:34:04,972 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:04,972 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:04,972 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:04,973 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:05,006 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:05,008 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:05,009 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:05,043 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:05,076 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:05,103 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:05,148 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:34:05,193 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:05,215 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:05,309 INFO L356 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-03 02:34:05,309 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-03 02:34:05,514 INFO L356 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-03 02:34:05,514 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-03 02:34:06,153 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:34:06,153 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:34:06,230 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:34:06,230 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:34:06,334 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:34:06,334 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:34:06,399 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:11,002 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35804#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:34:11,002 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:11,002 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:11,002 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 23, 23] total 63 [2022-11-03 02:34:11,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2008952301] [2022-11-03 02:34:11,003 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:11,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-03 02:34:11,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:11,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-03 02:34:11,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=401, Invalid=5451, Unknown=0, NotChecked=0, Total=5852 [2022-11-03 02:34:11,004 INFO L87 Difference]: Start difference. First operand 733 states and 866 transitions. Second operand has 63 states, 63 states have (on average 1.8888888888888888) internal successors, (119), 63 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:25,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:25,013 INFO L93 Difference]: Finished difference Result 844 states and 973 transitions. [2022-11-03 02:34:25,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 98 states. [2022-11-03 02:34:25,014 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 63 states have (on average 1.8888888888888888) internal successors, (119), 63 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-03 02:34:25,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:25,018 INFO L225 Difference]: With dead ends: 844 [2022-11-03 02:34:25,018 INFO L226 Difference]: Without dead ends: 805 [2022-11-03 02:34:25,019 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 157 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6256 ImplicationChecksByTransitivity, 19.5s TimeCoverageRelationStatistics Valid=2855, Invalid=22267, Unknown=0, NotChecked=0, Total=25122 [2022-11-03 02:34:25,019 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 178 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 2436 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 2799 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 2436 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 312 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:25,019 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 316 Invalid, 2799 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 2436 Invalid, 0 Unknown, 312 Unchecked, 1.8s Time] [2022-11-03 02:34:25,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 805 states. [2022-11-03 02:34:25,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 805 to 709. [2022-11-03 02:34:25,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 709 states, 706 states have (on average 1.1742209631728044) internal successors, (829), 708 states have internal predecessors, (829), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:25,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 709 states to 709 states and 829 transitions. [2022-11-03 02:34:25,028 INFO L78 Accepts]: Start accepts. Automaton has 709 states and 829 transitions. Word has length 51 [2022-11-03 02:34:25,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:25,029 INFO L495 AbstractCegarLoop]: Abstraction has 709 states and 829 transitions. [2022-11-03 02:34:25,029 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 63 states have (on average 1.8888888888888888) internal successors, (119), 63 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:25,029 INFO L276 IsEmpty]: Start isEmpty. Operand 709 states and 829 transitions. [2022-11-03 02:34:25,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-03 02:34:25,031 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:25,031 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:25,073 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:25,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-11-03 02:34:25,246 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:34:25,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:25,247 INFO L85 PathProgramCache]: Analyzing trace with hash 613890594, now seen corresponding path program 13 times [2022-11-03 02:34:25,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:25,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1976830446] [2022-11-03 02:34:25,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:25,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:25,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:26,287 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:26,288 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:26,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1976830446] [2022-11-03 02:34:26,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1976830446] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:26,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [961377993] [2022-11-03 02:34:26,288 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:34:26,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:26,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:26,289 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:26,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-11-03 02:34:26,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:26,524 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 90 conjunts are in the unsatisfiable core [2022-11-03 02:34:26,526 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:27,297 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:34:28,969 INFO L356 Elim1Store]: treesize reduction 33, result has 49.2 percent of original size [2022-11-03 02:34:28,970 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 73 treesize of output 66 [2022-11-03 02:34:28,973 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-03 02:34:29,035 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 16 proven. 138 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:34:29,035 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:30,642 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-11-03 02:34:30,646 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-11-03 02:34:32,724 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 73 proven. 81 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:34:32,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [961377993] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:32,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [536569768] [2022-11-03 02:34:32,725 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:34:32,725 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:32,725 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:32,726 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:32,726 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:32,757 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:32,762 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:32,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:32,806 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:32,844 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:32,863 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:32,911 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:34:32,954 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:32,978 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:33,087 INFO L356 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-03 02:34:33,087 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-03 02:34:33,265 INFO L356 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-03 02:34:33,265 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-03 02:34:33,794 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:34:33,795 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:34:33,905 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:34:33,905 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:34:34,006 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:34:34,006 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:34:34,059 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:39,689 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37919#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:34:39,689 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:39,689 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:39,689 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 31, 31] total 84 [2022-11-03 02:34:39,689 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539079029] [2022-11-03 02:34:39,689 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:39,690 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 84 states [2022-11-03 02:34:39,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:39,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 84 interpolants. [2022-11-03 02:34:39,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=640, Invalid=8866, Unknown=0, NotChecked=0, Total=9506 [2022-11-03 02:34:39,691 INFO L87 Difference]: Start difference. First operand 709 states and 829 transitions. Second operand has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:47,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:47,190 INFO L93 Difference]: Finished difference Result 797 states and 912 transitions. [2022-11-03 02:34:47,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2022-11-03 02:34:47,190 INFO L78 Accepts]: Start accepts. Automaton has has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-03 02:34:47,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:47,193 INFO L225 Difference]: With dead ends: 797 [2022-11-03 02:34:47,193 INFO L226 Difference]: Without dead ends: 754 [2022-11-03 02:34:47,194 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 79 SyntacticMatches, 1 SemanticMatches, 158 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7082 ImplicationChecksByTransitivity, 16.9s TimeCoverageRelationStatistics Valid=2180, Invalid=23260, Unknown=0, NotChecked=0, Total=25440 [2022-11-03 02:34:47,194 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 183 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 1962 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 2123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 1962 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 108 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:47,194 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 186 Invalid, 2123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 1962 Invalid, 0 Unknown, 108 Unchecked, 1.3s Time] [2022-11-03 02:34:47,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 754 states. [2022-11-03 02:34:47,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 754 to 630. [2022-11-03 02:34:47,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 630 states, 627 states have (on average 1.1658692185007975) internal successors, (731), 629 states have internal predecessors, (731), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:47,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 630 states to 630 states and 731 transitions. [2022-11-03 02:34:47,201 INFO L78 Accepts]: Start accepts. Automaton has 630 states and 731 transitions. Word has length 51 [2022-11-03 02:34:47,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:47,201 INFO L495 AbstractCegarLoop]: Abstraction has 630 states and 731 transitions. [2022-11-03 02:34:47,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 84 states, 84 states have (on average 1.6666666666666667) internal successors, (140), 84 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:47,201 INFO L276 IsEmpty]: Start isEmpty. Operand 630 states and 731 transitions. [2022-11-03 02:34:47,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-03 02:34:47,203 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:47,203 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:47,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:47,418 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-11-03 02:34:47,418 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:34:47,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:47,419 INFO L85 PathProgramCache]: Analyzing trace with hash 1192453680, now seen corresponding path program 13 times [2022-11-03 02:34:47,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:47,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1771097242] [2022-11-03 02:34:47,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:47,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:47,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:48,544 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 81 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:48,544 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:48,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1771097242] [2022-11-03 02:34:48,545 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1771097242] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:48,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1437572591] [2022-11-03 02:34:48,545 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:34:48,545 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:48,545 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:48,546 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:48,547 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-11-03 02:34:48,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:48,778 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 109 conjunts are in the unsatisfiable core [2022-11-03 02:34:48,780 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:49,602 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:52,995 INFO L356 Elim1Store]: treesize reduction 49, result has 59.8 percent of original size [2022-11-03 02:34:52,996 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 12 select indices, 12 select index equivalence classes, 55 disjoint index pairs (out of 66 index pairs), introduced 12 new quantified variables, introduced 66 case distinctions, treesize of input 118 treesize of output 119 [2022-11-03 02:34:53,001 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-11-03 02:34:53,123 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 11 proven. 231 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:53,123 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:56,064 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 142 [2022-11-03 02:34:56,084 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 11 select indices, 11 select index equivalence classes, 55 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 0 case distinctions, treesize of input 252 treesize of output 210 [2022-11-03 02:34:56,094 WARN L718 sPolynomialRelations]: Constructing 2048(two to the power of 11 dual juncts. [2022-11-03 02:34:58,698 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 121 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:58,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1437572591] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:58,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1545785161] [2022-11-03 02:34:58,702 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:34:58,702 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:58,703 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:58,703 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:58,703 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:58,754 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:58,756 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:58,757 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:58,804 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,856 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,877 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,928 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,969 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:34:58,970 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:34:59,038 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:01,716 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39886#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:01,716 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:01,716 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:01,716 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 39, 39] total 102 [2022-11-03 02:35:01,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619136612] [2022-11-03 02:35:01,716 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:01,716 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 102 states [2022-11-03 02:35:01,716 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:01,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 102 interpolants. [2022-11-03 02:35:01,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=877, Invalid=11333, Unknown=0, NotChecked=0, Total=12210 [2022-11-03 02:35:01,718 INFO L87 Difference]: Start difference. First operand 630 states and 731 transitions. Second operand has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:09,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:09,225 INFO L93 Difference]: Finished difference Result 853 states and 994 transitions. [2022-11-03 02:35:09,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 90 states. [2022-11-03 02:35:09,225 INFO L78 Accepts]: Start accepts. Automaton has has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-03 02:35:09,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:09,227 INFO L225 Difference]: With dead ends: 853 [2022-11-03 02:35:09,227 INFO L226 Difference]: Without dead ends: 829 [2022-11-03 02:35:09,228 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 236 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 166 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7642 ImplicationChecksByTransitivity, 17.6s TimeCoverageRelationStatistics Valid=2236, Invalid=25820, Unknown=0, NotChecked=0, Total=28056 [2022-11-03 02:35:09,228 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 179 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 1606 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 1979 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 1606 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 325 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:09,228 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [179 Valid, 206 Invalid, 1979 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 1606 Invalid, 0 Unknown, 325 Unchecked, 1.0s Time] [2022-11-03 02:35:09,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 829 states. [2022-11-03 02:35:09,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 829 to 764. [2022-11-03 02:35:09,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 764 states, 761 states have (on average 1.1813403416557162) internal successors, (899), 763 states have internal predecessors, (899), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:09,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 764 states to 764 states and 899 transitions. [2022-11-03 02:35:09,238 INFO L78 Accepts]: Start accepts. Automaton has 764 states and 899 transitions. Word has length 51 [2022-11-03 02:35:09,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:09,239 INFO L495 AbstractCegarLoop]: Abstraction has 764 states and 899 transitions. [2022-11-03 02:35:09,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:09,239 INFO L276 IsEmpty]: Start isEmpty. Operand 764 states and 899 transitions. [2022-11-03 02:35:09,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-03 02:35:09,240 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:09,241 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:09,278 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:09,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable60 [2022-11-03 02:35:09,458 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:35:09,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:09,459 INFO L85 PathProgramCache]: Analyzing trace with hash 1847398223, now seen corresponding path program 11 times [2022-11-03 02:35:09,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:09,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [969561843] [2022-11-03 02:35:09,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:09,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:09,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:09,958 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 9 proven. 66 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-03 02:35:09,959 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:09,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [969561843] [2022-11-03 02:35:09,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [969561843] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:09,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1951327156] [2022-11-03 02:35:09,959 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:35:09,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:09,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:09,962 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:09,986 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-11-03 02:35:10,815 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-03 02:35:10,815 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:35:10,819 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-03 02:35:10,820 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:11,196 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-03 02:35:11,196 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:11,552 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-03 02:35:11,664 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-03 02:35:11,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1951327156] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:11,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1232200996] [2022-11-03 02:35:11,665 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:35:11,665 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:11,666 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:11,666 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:11,666 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:11,696 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:11,698 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:11,699 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:11,727 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:11,782 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:11,808 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:11,860 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:35:11,860 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-03 02:35:11,915 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:11,947 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:11,991 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:12,042 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:35:12,043 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:35:12,130 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:12,132 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:12,183 INFO L356 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-11-03 02:35:12,184 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-11-03 02:35:12,306 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:12,306 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:12,393 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:12,393 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:12,442 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:15,428 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '41973#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:15,428 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:15,428 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:15,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 40 [2022-11-03 02:35:15,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1033941538] [2022-11-03 02:35:15,428 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:15,429 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-03 02:35:15,429 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:15,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-03 02:35:15,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=284, Invalid=2686, Unknown=0, NotChecked=0, Total=2970 [2022-11-03 02:35:15,429 INFO L87 Difference]: Start difference. First operand 764 states and 899 transitions. Second operand has 41 states, 40 states have (on average 2.725) internal successors, (109), 41 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:16,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:16,606 INFO L93 Difference]: Finished difference Result 843 states and 968 transitions. [2022-11-03 02:35:16,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-03 02:35:16,607 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 40 states have (on average 2.725) internal successors, (109), 41 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-03 02:35:16,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:16,610 INFO L225 Difference]: With dead ends: 843 [2022-11-03 02:35:16,610 INFO L226 Difference]: Without dead ends: 843 [2022-11-03 02:35:16,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 111 SyntacticMatches, 6 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1513 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=734, Invalid=4668, Unknown=0, NotChecked=0, Total=5402 [2022-11-03 02:35:16,611 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 343 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 1002 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 1052 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 1002 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:16,611 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [343 Valid, 296 Invalid, 1052 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 1002 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:35:16,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 843 states. [2022-11-03 02:35:16,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 843 to 769. [2022-11-03 02:35:16,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 769 states, 766 states have (on average 1.1801566579634464) internal successors, (904), 768 states have internal predecessors, (904), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:16,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 769 states to 769 states and 904 transitions. [2022-11-03 02:35:16,619 INFO L78 Accepts]: Start accepts. Automaton has 769 states and 904 transitions. Word has length 52 [2022-11-03 02:35:16,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:16,619 INFO L495 AbstractCegarLoop]: Abstraction has 769 states and 904 transitions. [2022-11-03 02:35:16,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 40 states have (on average 2.725) internal successors, (109), 41 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:16,619 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 904 transitions. [2022-11-03 02:35:16,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:35:16,620 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:16,621 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 5, 5, 5, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:16,655 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:16,834 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:16,834 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:35:16,834 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:16,835 INFO L85 PathProgramCache]: Analyzing trace with hash 1699797832, now seen corresponding path program 14 times [2022-11-03 02:35:16,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:16,835 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1668100760] [2022-11-03 02:35:16,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:16,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:16,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:17,613 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 9 proven. 79 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:35:17,613 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:17,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1668100760] [2022-11-03 02:35:17,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1668100760] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:17,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1721699642] [2022-11-03 02:35:17,613 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:35:17,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:17,614 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:17,614 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:17,616 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-11-03 02:35:18,302 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-03 02:35:18,303 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:35:18,307 INFO L263 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 72 conjunts are in the unsatisfiable core [2022-11-03 02:35:18,309 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:18,323 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:35:18,323 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:35:18,660 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:18,731 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:18,731 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-03 02:35:19,256 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 22 proven. 66 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:35:19,256 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:19,817 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:35:19,822 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-03 02:35:20,987 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 25 proven. 63 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-03 02:35:20,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1721699642] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:20,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [577872036] [2022-11-03 02:35:20,988 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:35:20,988 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:20,988 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:20,988 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:20,988 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:21,018 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:21,020 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:21,021 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:21,071 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:21,112 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:21,136 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:21,201 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:35:21,202 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-11-03 02:35:21,269 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:21,299 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:21,337 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:21,385 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:35:21,385 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:35:21,526 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:35:21,526 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:35:21,616 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:21,617 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:21,729 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:21,730 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:21,790 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:25,496 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '44015#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:25,497 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:25,497 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:25,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 53 [2022-11-03 02:35:25,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2093830856] [2022-11-03 02:35:25,497 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:25,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-03 02:35:25,497 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:25,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-03 02:35:25,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=386, Invalid=4170, Unknown=0, NotChecked=0, Total=4556 [2022-11-03 02:35:25,498 INFO L87 Difference]: Start difference. First operand 769 states and 904 transitions. Second operand has 54 states, 53 states have (on average 2.5660377358490565) internal successors, (136), 54 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:30,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:30,674 INFO L93 Difference]: Finished difference Result 857 states and 992 transitions. [2022-11-03 02:35:30,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-03 02:35:30,674 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 2.5660377358490565) internal successors, (136), 54 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-03 02:35:30,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:30,678 INFO L225 Difference]: With dead ends: 857 [2022-11-03 02:35:30,678 INFO L226 Difference]: Without dead ends: 857 [2022-11-03 02:35:30,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 227 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 113 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3004 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=1269, Invalid=11841, Unknown=0, NotChecked=0, Total=13110 [2022-11-03 02:35:30,679 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 235 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 1367 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 1469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 1367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 2 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:30,679 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 218 Invalid, 1469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 1367 Invalid, 0 Unknown, 2 Unchecked, 1.0s Time] [2022-11-03 02:35:30,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 857 states. [2022-11-03 02:35:30,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 857 to 797. [2022-11-03 02:35:30,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 797 states, 794 states have (on average 1.1763224181360201) internal successors, (934), 796 states have internal predecessors, (934), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:30,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 797 states to 797 states and 934 transitions. [2022-11-03 02:35:30,690 INFO L78 Accepts]: Start accepts. Automaton has 797 states and 934 transitions. Word has length 55 [2022-11-03 02:35:30,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:30,691 INFO L495 AbstractCegarLoop]: Abstraction has 797 states and 934 transitions. [2022-11-03 02:35:30,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 2.5660377358490565) internal successors, (136), 54 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:30,691 INFO L276 IsEmpty]: Start isEmpty. Operand 797 states and 934 transitions. [2022-11-03 02:35:30,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:35:30,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:30,692 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 6, 5, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:30,735 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:30,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable62 [2022-11-03 02:35:30,906 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:35:30,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:30,907 INFO L85 PathProgramCache]: Analyzing trace with hash 1325568784, now seen corresponding path program 15 times [2022-11-03 02:35:30,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:30,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2033566815] [2022-11-03 02:35:30,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:30,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:30,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:31,912 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 36 proven. 79 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:35:31,912 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:31,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2033566815] [2022-11-03 02:35:31,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2033566815] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:31,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1722019107] [2022-11-03 02:35:31,912 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:35:31,912 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:31,912 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:31,913 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:31,914 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-11-03 02:35:32,278 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:35:32,279 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:35:32,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 417 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-03 02:35:32,284 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:32,993 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:35:33,732 INFO L356 Elim1Store]: treesize reduction 21, result has 48.8 percent of original size [2022-11-03 02:35:33,732 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 49 treesize of output 42 [2022-11-03 02:35:33,780 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 14 proven. 89 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:35:33,780 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:34,415 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 64 [2022-11-03 02:35:34,422 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 56 [2022-11-03 02:35:36,026 INFO L134 CoverageAnalysis]: Checked inductivity of 124 backedges. 39 proven. 64 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-03 02:35:36,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1722019107] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:36,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [657263601] [2022-11-03 02:35:36,028 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:35:36,028 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:36,028 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:36,029 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:36,029 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:36,060 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:36,063 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:36,063 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:36,097 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:36,149 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:36,172 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:36,213 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:35:36,255 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:36,276 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:36,364 INFO L356 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-03 02:35:36,365 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-03 02:35:36,543 INFO L356 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-03 02:35:36,544 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-03 02:35:37,097 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:35:37,097 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:35:37,180 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:37,180 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:37,281 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:37,281 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:37,338 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:41,838 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '46173#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:41,838 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:41,838 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:41,838 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 26, 26] total 72 [2022-11-03 02:35:41,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888014472] [2022-11-03 02:35:41,839 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:41,839 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-03 02:35:41,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:41,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-03 02:35:41,840 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=484, Invalid=6826, Unknown=0, NotChecked=0, Total=7310 [2022-11-03 02:35:41,840 INFO L87 Difference]: Start difference. First operand 797 states and 934 transitions. Second operand has 72 states, 72 states have (on average 1.8333333333333333) internal successors, (132), 72 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:56,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:56,189 INFO L93 Difference]: Finished difference Result 922 states and 1061 transitions. [2022-11-03 02:35:56,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 112 states. [2022-11-03 02:35:56,190 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 72 states have (on average 1.8333333333333333) internal successors, (132), 72 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-03 02:35:56,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:56,194 INFO L225 Difference]: With dead ends: 922 [2022-11-03 02:35:56,194 INFO L226 Difference]: Without dead ends: 879 [2022-11-03 02:35:56,196 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 279 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 177 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7984 ImplicationChecksByTransitivity, 19.7s TimeCoverageRelationStatistics Valid=3524, Invalid=28338, Unknown=0, NotChecked=0, Total=31862 [2022-11-03 02:35:56,196 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 192 mSDsluCounter, 392 mSDsCounter, 0 mSdLazyCounter, 3502 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 389 SdHoareTripleChecker+Invalid, 3986 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 3502 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 441 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:56,196 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 389 Invalid, 3986 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 3502 Invalid, 0 Unknown, 441 Unchecked, 2.4s Time] [2022-11-03 02:35:56,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 879 states. [2022-11-03 02:35:56,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 879 to 805. [2022-11-03 02:35:56,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 805 states, 802 states have (on average 1.1658354114713216) internal successors, (935), 804 states have internal predecessors, (935), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:56,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 805 states and 935 transitions. [2022-11-03 02:35:56,207 INFO L78 Accepts]: Start accepts. Automaton has 805 states and 935 transitions. Word has length 55 [2022-11-03 02:35:56,207 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:56,207 INFO L495 AbstractCegarLoop]: Abstraction has 805 states and 935 transitions. [2022-11-03 02:35:56,207 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 72 states have (on average 1.8333333333333333) internal successors, (132), 72 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:56,208 INFO L276 IsEmpty]: Start isEmpty. Operand 805 states and 935 transitions. [2022-11-03 02:35:56,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:35:56,209 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:56,209 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:56,254 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:56,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable63,53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:56,434 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:35:56,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:56,435 INFO L85 PathProgramCache]: Analyzing trace with hash -793561896, now seen corresponding path program 16 times [2022-11-03 02:35:56,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:56,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1501336727] [2022-11-03 02:35:56,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:56,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:56,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:57,786 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 64 proven. 129 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:57,786 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:57,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1501336727] [2022-11-03 02:35:57,786 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1501336727] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:57,787 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [596934742] [2022-11-03 02:35:57,787 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:35:57,787 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:57,787 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:57,788 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:57,789 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Waiting until timeout for monitored process [2022-11-03 02:35:58,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:58,038 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 95 conjunts are in the unsatisfiable core [2022-11-03 02:35:58,040 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:58,731 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:01,212 INFO L356 Elim1Store]: treesize reduction 41, result has 59.0 percent of original size [2022-11-03 02:36:01,213 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 45 case distinctions, treesize of input 98 treesize of output 97 [2022-11-03 02:36:01,216 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-03 02:36:01,301 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 18 proven. 173 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:36:01,301 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:36:03,330 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 116 [2022-11-03 02:36:03,345 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 36 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 0 case distinctions, treesize of input 206 treesize of output 172 [2022-11-03 02:36:03,352 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-11-03 02:36:05,231 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 91 proven. 100 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:36:05,231 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [596934742] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:36:05,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1885944370] [2022-11-03 02:36:05,232 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:36:05,233 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:36:05,233 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:36:05,233 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:36:05,233 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:36:05,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:05,268 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:05,268 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:36:05,297 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:05,334 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:05,356 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:05,401 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:36:05,446 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:05,470 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:05,572 INFO L356 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-03 02:36:05,573 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-11-03 02:36:05,752 INFO L356 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-03 02:36:05,753 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-11-03 02:36:06,272 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:36:06,273 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:36:06,342 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:06,343 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:06,457 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:06,457 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:06,508 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:36:11,867 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48516#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:36:11,867 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:36:11,867 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:36:11,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 34, 34] total 92 [2022-11-03 02:36:11,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639503220] [2022-11-03 02:36:11,868 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:36:11,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 92 states [2022-11-03 02:36:11,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:11,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 92 interpolants. [2022-11-03 02:36:11,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=713, Invalid=10417, Unknown=0, NotChecked=0, Total=11130 [2022-11-03 02:36:11,869 INFO L87 Difference]: Start difference. First operand 805 states and 935 transitions. Second operand has 92 states, 92 states have (on average 1.6521739130434783) internal successors, (152), 92 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:23,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:23,290 INFO L93 Difference]: Finished difference Result 880 states and 1005 transitions. [2022-11-03 02:36:23,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 98 states. [2022-11-03 02:36:23,291 INFO L78 Accepts]: Start accepts. Automaton has has 92 states, 92 states have (on average 1.6521739130434783) internal successors, (152), 92 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-03 02:36:23,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:23,294 INFO L225 Difference]: With dead ends: 880 [2022-11-03 02:36:23,294 INFO L226 Difference]: Without dead ends: 829 [2022-11-03 02:36:23,295 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 259 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 173 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7935 ImplicationChecksByTransitivity, 21.4s TimeCoverageRelationStatistics Valid=2508, Invalid=27942, Unknown=0, NotChecked=0, Total=30450 [2022-11-03 02:36:23,296 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 201 mSDsluCounter, 322 mSDsCounter, 0 mSdLazyCounter, 2531 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 3029 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 2531 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 445 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:23,296 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 313 Invalid, 3029 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 2531 Invalid, 0 Unknown, 445 Unchecked, 1.7s Time] [2022-11-03 02:36:23,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 829 states. [2022-11-03 02:36:23,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 829 to 753. [2022-11-03 02:36:23,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 753 states, 750 states have (on average 1.16) internal successors, (870), 752 states have internal predecessors, (870), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:23,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 753 states to 753 states and 870 transitions. [2022-11-03 02:36:23,303 INFO L78 Accepts]: Start accepts. Automaton has 753 states and 870 transitions. Word has length 55 [2022-11-03 02:36:23,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:23,304 INFO L495 AbstractCegarLoop]: Abstraction has 753 states and 870 transitions. [2022-11-03 02:36:23,304 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 92 states, 92 states have (on average 1.6521739130434783) internal successors, (152), 92 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:23,304 INFO L276 IsEmpty]: Start isEmpty. Operand 753 states and 870 transitions. [2022-11-03 02:36:23,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:36:23,305 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:23,305 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:23,335 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:23,526 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable64,54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:23,526 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:36:23,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:23,527 INFO L85 PathProgramCache]: Analyzing trace with hash -1916986650, now seen corresponding path program 14 times [2022-11-03 02:36:23,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:23,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211147966] [2022-11-03 02:36:23,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:23,527 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:23,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:24,893 INFO L134 CoverageAnalysis]: Checked inductivity of 288 backedges. 100 proven. 188 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:24,893 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:24,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211147966] [2022-11-03 02:36:24,893 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211147966] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:24,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [440409995] [2022-11-03 02:36:24,893 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:36:24,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:24,894 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:24,894 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:24,895 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Waiting until timeout for monitored process [2022-11-03 02:36:25,384 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 13 check-sat command(s) [2022-11-03 02:36:25,384 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:36:25,388 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 95 conjunts are in the unsatisfiable core [2022-11-03 02:36:25,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:25,405 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:36:25,406 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:36:25,474 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:39,545 WARN L230 Executor]: External (MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1) with exit command (exit)) stderr output: (error "out of memory") [2022-11-03 02:39:39,546 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_DEPENDING: External (MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1) with exit command (exit)) Received EOF on stdin. stderr output: (error "out of memory") [2022-11-03 02:39:39,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [836939196] [2022-11-03 02:39:39,547 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:39:39,547 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:39:39,547 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:39:39,547 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:39:39,547 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:39:39,548 FATAL L? ?]: Ignoring exception! de.uni_freiburg.informatik.ultimate.logic.SMTLIBException: External (MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1) with exit command (exit)) Connection to SMT solver broken at de.uni_freiburg.informatik.ultimate.smtsolver.external.Executor.convertIOException(Executor.java:314) at de.uni_freiburg.informatik.ultimate.smtsolver.external.Executor.input(Executor.java:158) at de.uni_freiburg.informatik.ultimate.smtsolver.external.Scriptor.push(Scriptor.java:132) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.arrays.DiffWrapperScript.push(DiffWrapperScript.java:90) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.push(WrapperScript.java:148) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.scripttransfer.HistoryRecordingScript.push(HistoryRecordingScript.java:107) at de.uni_freiburg.informatik.ultimate.logic.Util.checkSat(Util.java:48) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.SmtUtils.checkSatTerm(SmtUtils.java:274) at de.uni_freiburg.informatik.ultimate.lib.sifa.SymbolicTools.isFalse(SymbolicTools.java:221) at de.uni_freiburg.informatik.ultimate.lib.sifa.domain.RelationCheckUtil.isEqBottom_SolverAlphaSolver(RelationCheckUtil.java:56) at de.uni_freiburg.informatik.ultimate.lib.sifa.domain.ExplicitValueDomain.isEqBottom(ExplicitValueDomain.java:73) at de.uni_freiburg.informatik.ultimate.lib.sifa.domain.CompoundDomain.isEqBottom(CompoundDomain.java:84) at de.uni_freiburg.informatik.ultimate.lib.sifa.domain.StatsWrapperDomain.isEqBottom(StatsWrapperDomain.java:69) at de.uni_freiburg.informatik.ultimate.lib.sifa.DagInterpreter.earlyExitAfterStep(DagInterpreter.java:139) at de.uni_freiburg.informatik.ultimate.lib.sifa.DagInterpreter.interpret(DagInterpreter.java:125) at de.uni_freiburg.informatik.ultimate.lib.sifa.IcfgInterpreter.interpretLoisInProcedure(IcfgInterpreter.java:136) at de.uni_freiburg.informatik.ultimate.lib.sifa.IcfgInterpreter.interpret(IcfgInterpreter.java:127) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.SifaRunner.(SifaRunner.java:102) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleSifa.construct(IpTcStrategyModuleSifa.java:68) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.getOrConstruct(IpTcStrategyModuleBase.java:101) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.getInterpolantComputationStatus(IpTcStrategyModuleBase.java:77) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.tracehandling.AutomatonFreeRefinementEngine.tryExecuteInterpolantGenerator(AutomatonFreeRefinementEngine.java:266) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.tracehandling.AutomatonFreeRefinementEngine.generateProof(AutomatonFreeRefinementEngine.java:147) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.tracehandling.AutomatonFreeRefinementEngine.executeStrategy(AutomatonFreeRefinementEngine.java:137) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.tracehandling.AutomatonFreeRefinementEngine.(AutomatonFreeRefinementEngine.java:85) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:82) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:336) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:431) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.startCegar(AbstractCegarLoop.java:366) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.runCegar(AbstractCegarLoop.java:348) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.executeCegarLoop(TraceAbstractionStarter.java:415) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.analyseProgram(TraceAbstractionStarter.java:302) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.analyseSequentialProgram(TraceAbstractionStarter.java:262) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:175) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:154) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:124) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) Caused by: java.io.IOException: Stream closed at java.base/java.lang.ProcessBuilder$NullOutputStream.write(ProcessBuilder.java:442) at java.base/java.io.OutputStream.write(OutputStream.java:157) at java.base/java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:81) at java.base/java.io.BufferedOutputStream.flush(BufferedOutputStream.java:142) at java.base/sun.nio.cs.StreamEncoder.implFlush(StreamEncoder.java:318) at java.base/sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:153) at java.base/java.io.OutputStreamWriter.flush(OutputStreamWriter.java:251) at java.base/java.io.BufferedWriter.flush(BufferedWriter.java:257) at de.uni_freiburg.informatik.ultimate.smtsolver.external.Executor.input(Executor.java:156) ... 44 more [2022-11-03 02:39:39,551 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:39:39,551 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30] total 30 [2022-11-03 02:39:39,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1412622895] [2022-11-03 02:39:39,551 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-03 02:39:39,551 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-03 02:39:39,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:39,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-03 02:39:39,552 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=1978, Unknown=40, NotChecked=0, Total=2256 [2022-11-03 02:39:39,552 INFO L87 Difference]: Start difference. First operand 753 states and 870 transitions. Second operand has 31 states, 30 states have (on average 1.8333333333333333) internal successors, (55), 31 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:39,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:39:39,545 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 101 [2022-11-03 02:39:39,552 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 605 ImplicationChecksByTransitivity, 155.2s TimeCoverageRelationStatistics Valid=238, Invalid=1978, Unknown=40, NotChecked=0, Total=2256 [2022-11-03 02:39:39,553 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:39,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 0 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:39:39,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Forceful destruction successful, exit code 0 [2022-11-03 02:39:39,762 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable65 [2022-11-03 02:39:39,762 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.IllegalStateException: ManagedScript already locked by de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.MonolithicImplicationChecker@10ddf4cf at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.ManagedScript.lock(ManagedScript.java:82) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.hoaretriple.IncrementalHoareTripleChecker.assertCodeBlock(IncrementalHoareTripleChecker.java:360) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.hoaretriple.IncrementalHoareTripleChecker.prepareAssertionStackAndAddTransition(IncrementalHoareTripleChecker.java:206) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.hoaretriple.IncrementalHoareTripleChecker.checkInternal(IncrementalHoareTripleChecker.java:131) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.hoaretriple.ChainingHoareTripleChecker$ProtectedHtc.checkInternal(ChainingHoareTripleChecker.java:460) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.hoaretriple.ChainingHoareTripleChecker.checkInternal(ChainingHoareTripleChecker.java:104) at de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.hoaretriple.CachingHoareTripleChecker.checkInternal(CachingHoareTripleChecker.java:95) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.interpolantautomata.transitionappender.AbstractInterpolantAutomaton$InternalSuccessorComputationHelper.computeSuccWithSolver(AbstractInterpolantAutomaton.java:357) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.interpolantautomata.transitionappender.BasicAbstractInterpolantAutomaton.chooseFalseSuccessor2(BasicAbstractInterpolantAutomaton.java:107) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.interpolantautomata.transitionappender.BasicAbstractInterpolantAutomaton.computeSuccs(BasicAbstractInterpolantAutomaton.java:73) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.interpolantautomata.transitionappender.BasicAbstractInterpolantAutomaton.computeSuccs(BasicAbstractInterpolantAutomaton.java:1) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.interpolantautomata.transitionappender.AbstractInterpolantAutomaton.internalSuccessors(AbstractInterpolantAutomaton.java:233) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.interpolantautomata.transitionappender.AbstractInterpolantAutomaton.internalSuccessors(AbstractInterpolantAutomaton.java:1) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.TotalizeNwa.internalSuccessors(TotalizeNwa.java:246) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.ComplementDeterministicNwa.internalSuccessors(ComplementDeterministicNwa.java:121) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.ProductNwa.internalSuccessors(ProductNwa.java:218) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.ProductNwa.internalSuccessors(ProductNwa.java:210) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates$ReachableStatesComputation.addInternalsAndSuccessors(NestedWordAutomatonReachableStates.java:1058) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates$ReachableStatesComputation.(NestedWordAutomatonReachableStates.java:960) at de.uni_freiburg.informatik.ultimate.automata.nestedword.reachablestates.NestedWordAutomatonReachableStates.(NestedWordAutomatonReachableStates.java:182) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.Difference.computeDifference(Difference.java:137) at de.uni_freiburg.informatik.ultimate.automata.nestedword.operations.Difference.(Difference.java:90) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.NwaCegarLoop.computeAutomataDifference(NwaCegarLoop.java:353) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.NwaCegarLoop.refineAbstraction(NwaCegarLoop.java:325) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.refineAbstractionInternal(AbstractCegarLoop.java:487) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:438) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.startCegar(AbstractCegarLoop.java:366) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.runCegar(AbstractCegarLoop.java:348) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.executeCegarLoop(TraceAbstractionStarter.java:415) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.analyseProgram(TraceAbstractionStarter.java:302) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.analyseSequentialProgram(TraceAbstractionStarter.java:262) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:175) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:154) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:124) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-11-03 02:39:39,764 INFO L158 Benchmark]: Toolchain (without parser) took 781191.11ms. Allocated memory was 125.8MB in the beginning and 390.1MB in the end (delta: 264.2MB). Free memory was 85.2MB in the beginning and 252.9MB in the end (delta: -167.7MB). Peak memory consumption was 98.0MB. Max. memory is 16.1GB. [2022-11-03 02:39:39,764 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 125.8MB. Free memory is still 102.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:39:39,764 INFO L158 Benchmark]: CACSL2BoogieTranslator took 437.65ms. Allocated memory is still 125.8MB. Free memory was 85.1MB in the beginning and 94.9MB in the end (delta: -9.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-03 02:39:39,764 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.10ms. Allocated memory is still 125.8MB. Free memory was 94.9MB in the beginning and 92.9MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:39:39,765 INFO L158 Benchmark]: Boogie Preprocessor took 55.74ms. Allocated memory is still 125.8MB. Free memory was 92.9MB in the beginning and 91.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:39:39,765 INFO L158 Benchmark]: RCFGBuilder took 601.22ms. Allocated memory is still 125.8MB. Free memory was 91.3MB in the beginning and 73.0MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-03 02:39:39,765 INFO L158 Benchmark]: TraceAbstraction took 780022.93ms. Allocated memory was 125.8MB in the beginning and 390.1MB in the end (delta: 264.2MB). Free memory was 71.9MB in the beginning and 252.9MB in the end (delta: -180.9MB). Peak memory consumption was 85.4MB. Max. memory is 16.1GB. [2022-11-03 02:39:39,765 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 125.8MB. Free memory is still 102.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 437.65ms. Allocated memory is still 125.8MB. Free memory was 85.1MB in the beginning and 94.9MB in the end (delta: -9.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.10ms. Allocated memory is still 125.8MB. Free memory was 94.9MB in the beginning and 92.9MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.74ms. Allocated memory is still 125.8MB. Free memory was 92.9MB in the beginning and 91.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 601.22ms. Allocated memory is still 125.8MB. Free memory was 91.3MB in the beginning and 73.0MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 780022.93ms. Allocated memory was 125.8MB in the beginning and 390.1MB in the end (delta: 264.2MB). Free memory was 71.9MB in the beginning and 252.9MB in the end (delta: -180.9MB). Peak memory consumption was 85.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: IllegalStateException: ManagedScript already locked by de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.MonolithicImplicationChecker@10ddf4cf de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: IllegalStateException: ManagedScript already locked by de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.MonolithicImplicationChecker@10ddf4cf: de.uni_freiburg.informatik.ultimate.lib.smtlibutils.ManagedScript.lock(ManagedScript.java:82) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:39:41,784 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:39:41,787 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:39:41,822 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:39:41,823 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:39:41,824 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:39:41,825 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:39:41,827 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:39:41,828 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:39:41,829 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:39:41,830 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:39:41,832 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:39:41,832 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:39:41,833 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:39:41,834 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:39:41,835 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:39:41,836 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:39:41,838 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:39:41,839 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:39:41,841 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:39:41,843 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:39:41,844 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:39:41,845 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:39:41,846 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:39:41,850 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:39:41,851 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:39:41,851 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:39:41,852 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:39:41,852 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:39:41,853 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:39:41,854 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:39:41,855 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:39:41,856 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:39:41,856 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:39:41,858 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:39:41,858 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:39:41,859 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:39:41,859 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:39:41,859 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:39:41,860 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:39:41,861 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:39:41,863 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf [2022-11-03 02:39:41,907 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:39:41,910 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:39:41,911 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:39:41,912 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:39:41,912 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:39:41,913 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:39:41,913 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:39:41,913 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:39:41,913 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:39:41,914 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:39:41,915 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:39:41,915 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:39:41,916 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-03 02:39:41,917 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-03 02:39:41,917 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:39:41,917 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:39:41,917 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-03 02:39:41,917 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:39:41,918 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:39:41,918 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:39:41,918 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-03 02:39:41,918 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-03 02:39:41,919 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-03 02:39:41,919 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:39:41,919 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-03 02:39:41,919 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-03 02:39:41,919 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-03 02:39:41,920 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:39:41,920 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:39:41,920 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:39:41,920 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-03 02:39:41,921 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:39:41,921 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:39:41,921 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:39:41,922 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:39:41,922 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-11-03 02:39:41,922 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-03 02:39:41,922 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:39:41,923 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-03 02:39:41,923 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e [2022-11-03 02:39:42,332 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:39:42,358 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:39:42,361 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:39:42,362 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:39:42,365 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:39:42,367 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-11-03 02:39:42,450 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8c0d3e48-9c5f-4db1-9144-9c2757f90d4e/bin/utaipan-7li7fVZpFI/data/2f6de054d/aa6a3cad68b0486e9c52bd0cb9d820fa/FLAGf2e592ea7