./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8688e0efa9d37c2205606fbd307da42d83b0f0e2936dd15336b8b67e136d86b0 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:21:45,932 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:21:45,935 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:21:45,982 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:21:45,983 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:21:45,988 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:21:45,990 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:21:45,994 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:21:45,996 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:21:46,001 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:21:46,002 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:21:46,005 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:21:46,005 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:21:46,008 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:21:46,009 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:21:46,011 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:21:46,013 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:21:46,014 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:21:46,015 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:21:46,022 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:21:46,024 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:21:46,025 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:21:46,028 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:21:46,029 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:21:46,038 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:21:46,038 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:21:46,039 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:21:46,040 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:21:46,041 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:21:46,042 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:21:46,044 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:21:46,045 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:21:46,047 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:21:46,049 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:21:46,050 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:21:46,050 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:21:46,051 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:21:46,051 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:21:46,052 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:21:46,053 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:21:46,053 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:21:46,054 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-03 02:21:46,096 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:21:46,097 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:21:46,098 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:21:46,098 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:21:46,099 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:21:46,099 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:21:46,099 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:21:46,099 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:21:46,100 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:21:46,100 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:21:46,101 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:21:46,101 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:21:46,101 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:21:46,101 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:21:46,102 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:21:46,102 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:21:46,102 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:21:46,102 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:21:46,103 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-03 02:21:46,103 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-03 02:21:46,104 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:21:46,104 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:21:46,104 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-03 02:21:46,104 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:21:46,104 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:21:46,105 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:21:46,105 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-03 02:21:46,105 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-03 02:21:46,105 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-03 02:21:46,106 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:21:46,106 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-03 02:21:46,106 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:21:46,106 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:21:46,107 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:21:46,107 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:21:46,107 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:21:46,107 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:21:46,107 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:21:46,108 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:21:46,108 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:21:46,108 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:21:46,108 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:21:46,108 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8688e0efa9d37c2205606fbd307da42d83b0f0e2936dd15336b8b67e136d86b0 [2022-11-03 02:21:46,444 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:21:46,475 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:21:46,478 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:21:46,479 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:21:46,480 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:21:46,481 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i [2022-11-03 02:21:46,564 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/data/0a7bd87aa/7d9b4372986c4ee381ea1be7887d0ffc/FLAGb625540f8 [2022-11-03 02:21:47,111 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:21:47,112 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i [2022-11-03 02:21:47,122 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/data/0a7bd87aa/7d9b4372986c4ee381ea1be7887d0ffc/FLAGb625540f8 [2022-11-03 02:21:47,416 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/data/0a7bd87aa/7d9b4372986c4ee381ea1be7887d0ffc [2022-11-03 02:21:47,420 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:21:47,422 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:21:47,427 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:21:47,427 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:21:47,431 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:21:47,431 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:47,434 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@518873ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47, skipping insertion in model container [2022-11-03 02:21:47,435 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:47,442 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:21:47,495 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:21:47,858 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:21:47,874 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:21:47,937 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:21:47,962 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:21:47,962 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47 WrapperNode [2022-11-03 02:21:47,963 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:21:47,964 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:21:47,964 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:21:47,964 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:21:47,971 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:47,983 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,004 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-11-03 02:21:48,004 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:21:48,005 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:21:48,005 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:21:48,005 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:21:48,013 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,014 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,017 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,018 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,023 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,042 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,044 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,045 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,047 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:21:48,048 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:21:48,048 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:21:48,048 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:21:48,049 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (1/1) ... [2022-11-03 02:21:48,057 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:21:48,068 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:21:48,079 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:21:48,083 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:21:48,122 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-03 02:21:48,123 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-03 02:21:48,123 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 02:21:48,123 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 02:21:48,123 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:21:48,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:21:48,270 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:21:48,273 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:21:48,615 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:21:48,705 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:21:48,705 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-03 02:21:48,707 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:21:48 BoogieIcfgContainer [2022-11-03 02:21:48,708 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:21:48,710 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:21:48,712 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:21:48,715 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:21:48,716 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:21:47" (1/3) ... [2022-11-03 02:21:48,716 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3114c038 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:21:48, skipping insertion in model container [2022-11-03 02:21:48,717 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:21:47" (2/3) ... [2022-11-03 02:21:48,718 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3114c038 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:21:48, skipping insertion in model container [2022-11-03 02:21:48,718 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:21:48" (3/3) ... [2022-11-03 02:21:48,720 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrcat-alloca-2.i [2022-11-03 02:21:48,740 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:21:48,740 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-11-03 02:21:48,797 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:21:48,802 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2810f04d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:21:48,802 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-11-03 02:21:48,807 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:48,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-03 02:21:48,813 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:48,814 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-03 02:21:48,815 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:48,819 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:48,820 INFO L85 PathProgramCache]: Analyzing trace with hash 151696, now seen corresponding path program 1 times [2022-11-03 02:21:48,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:48,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [139617057] [2022-11-03 02:21:48,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:48,828 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:48,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:49,025 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:49,025 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:49,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [139617057] [2022-11-03 02:21:49,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [139617057] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:49,027 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:49,027 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-03 02:21:49,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1494085183] [2022-11-03 02:21:49,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:49,033 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:21:49,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:49,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:21:49,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:49,074 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:49,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:49,213 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-11-03 02:21:49,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:21:49,217 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-03 02:21:49,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:49,225 INFO L225 Difference]: With dead ends: 33 [2022-11-03 02:21:49,225 INFO L226 Difference]: Without dead ends: 31 [2022-11-03 02:21:49,228 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:49,232 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 1 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:49,233 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 39 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:21:49,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-11-03 02:21:49,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-11-03 02:21:49,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:49,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-11-03 02:21:49,269 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-11-03 02:21:49,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:49,270 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-11-03 02:21:49,270 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:49,272 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-11-03 02:21:49,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-03 02:21:49,273 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:49,273 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-03 02:21:49,273 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:21:49,274 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:49,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:49,275 INFO L85 PathProgramCache]: Analyzing trace with hash 4702270, now seen corresponding path program 1 times [2022-11-03 02:21:49,275 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:49,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1668685106] [2022-11-03 02:21:49,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:49,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:49,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:49,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:49,622 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:49,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1668685106] [2022-11-03 02:21:49,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1668685106] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:49,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:49,624 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:21:49,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288812129] [2022-11-03 02:21:49,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:49,625 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:21:49,625 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:49,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:21:49,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:49,627 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:49,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:49,685 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-11-03 02:21:49,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:21:49,685 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-03 02:21:49,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:49,689 INFO L225 Difference]: With dead ends: 29 [2022-11-03 02:21:49,689 INFO L226 Difference]: Without dead ends: 29 [2022-11-03 02:21:49,695 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:49,697 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:49,698 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 13 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:21:49,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-03 02:21:49,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-03 02:21:49,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:49,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-11-03 02:21:49,702 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-11-03 02:21:49,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:49,702 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-11-03 02:21:49,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:49,702 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-11-03 02:21:49,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-03 02:21:49,703 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:49,703 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-03 02:21:49,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:21:49,704 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:49,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:49,704 INFO L85 PathProgramCache]: Analyzing trace with hash 4702271, now seen corresponding path program 1 times [2022-11-03 02:21:49,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:49,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292410582] [2022-11-03 02:21:49,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:49,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:49,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:50,016 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:50,016 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:50,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292410582] [2022-11-03 02:21:50,016 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292410582] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:50,017 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:50,017 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:21:50,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1667156178] [2022-11-03 02:21:50,017 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:50,018 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:21:50,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:50,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:21:50,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:21:50,019 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:50,179 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-11-03 02:21:50,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:21:50,180 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-03 02:21:50,180 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:50,183 INFO L225 Difference]: With dead ends: 55 [2022-11-03 02:21:50,184 INFO L226 Difference]: Without dead ends: 55 [2022-11-03 02:21:50,184 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:21:50,192 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 87 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 34 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:50,193 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 34 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:21:50,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-03 02:21:50,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-11-03 02:21:50,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-11-03 02:21:50,205 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-11-03 02:21:50,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:50,206 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-11-03 02:21:50,206 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,206 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-11-03 02:21:50,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:21:50,207 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:50,207 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:21:50,207 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:21:50,208 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:50,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:50,209 INFO L85 PathProgramCache]: Analyzing trace with hash 145855487, now seen corresponding path program 1 times [2022-11-03 02:21:50,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:50,210 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [492177957] [2022-11-03 02:21:50,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:50,210 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:50,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:50,298 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:50,298 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:50,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [492177957] [2022-11-03 02:21:50,299 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [492177957] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:50,299 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:50,299 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:21:50,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [428325322] [2022-11-03 02:21:50,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:50,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:21:50,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:50,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:21:50,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:50,304 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:50,343 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-11-03 02:21:50,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:21:50,343 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:21:50,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:50,346 INFO L225 Difference]: With dead ends: 29 [2022-11-03 02:21:50,346 INFO L226 Difference]: Without dead ends: 29 [2022-11-03 02:21:50,347 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:50,353 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:50,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 13 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:21:50,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-03 02:21:50,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-03 02:21:50,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-03 02:21:50,364 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-11-03 02:21:50,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:50,365 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-03 02:21:50,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,365 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-03 02:21:50,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:21:50,365 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:50,366 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:21:50,366 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:21:50,366 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:50,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:50,367 INFO L85 PathProgramCache]: Analyzing trace with hash 145855488, now seen corresponding path program 1 times [2022-11-03 02:21:50,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:50,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2113452248] [2022-11-03 02:21:50,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:50,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:50,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:50,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:50,698 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:50,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2113452248] [2022-11-03 02:21:50,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2113452248] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:50,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:50,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:21:50,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845248706] [2022-11-03 02:21:50,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:50,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:21:50,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:50,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:21:50,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:21:50,701 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:50,924 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-11-03 02:21:50,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:21:50,925 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:21:50,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:50,926 INFO L225 Difference]: With dead ends: 50 [2022-11-03 02:21:50,926 INFO L226 Difference]: Without dead ends: 50 [2022-11-03 02:21:50,926 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:21:50,927 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 123 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:50,927 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 24 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:21:50,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-03 02:21:50,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-11-03 02:21:50,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-11-03 02:21:50,933 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-11-03 02:21:50,933 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:50,933 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-11-03 02:21:50,933 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:50,937 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-11-03 02:21:50,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:21:50,937 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:50,938 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:21:50,938 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:21:50,938 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:50,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:50,939 INFO L85 PathProgramCache]: Analyzing trace with hash 145857698, now seen corresponding path program 1 times [2022-11-03 02:21:50,939 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:50,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [789330332] [2022-11-03 02:21:50,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:50,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:50,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:51,182 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:51,183 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:51,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [789330332] [2022-11-03 02:21:51,183 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [789330332] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:51,183 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:51,184 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:21:51,184 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017582789] [2022-11-03 02:21:51,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:51,184 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:21:51,185 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:51,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:21:51,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:21:51,186 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:51,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:51,308 INFO L93 Difference]: Finished difference Result 54 states and 62 transitions. [2022-11-03 02:21:51,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:21:51,309 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:21:51,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:51,310 INFO L225 Difference]: With dead ends: 54 [2022-11-03 02:21:51,310 INFO L226 Difference]: Without dead ends: 54 [2022-11-03 02:21:51,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:21:51,311 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 57 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:51,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 28 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:21:51,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-03 02:21:51,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 36. [2022-11-03 02:21:51,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 25 states have (on average 1.76) internal successors, (44), 35 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:51,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 44 transitions. [2022-11-03 02:21:51,317 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 44 transitions. Word has length 5 [2022-11-03 02:21:51,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:51,317 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 44 transitions. [2022-11-03 02:21:51,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:51,318 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 44 transitions. [2022-11-03 02:21:51,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-03 02:21:51,318 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:51,318 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-03 02:21:51,318 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-03 02:21:51,319 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:51,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:51,319 INFO L85 PathProgramCache]: Analyzing trace with hash 223988269, now seen corresponding path program 1 times [2022-11-03 02:21:51,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:51,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1990753480] [2022-11-03 02:21:51,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:51,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:51,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:51,582 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:51,583 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:51,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1990753480] [2022-11-03 02:21:51,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1990753480] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:51,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [956345328] [2022-11-03 02:21:51,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:51,584 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:51,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:21:51,586 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:21:51,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:21:51,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:51,669 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-03 02:21:51,675 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:21:51,880 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:21:51,889 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:21:51,900 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:21:52,058 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:52,058 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:21:52,304 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:21:52,343 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:52,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [956345328] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:21:52,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1056907499] [2022-11-03 02:21:52,367 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-03 02:21:52,367 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:21:52,372 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:21:52,377 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:21:52,377 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:21:52,476 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:21:52,478 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:21:52,479 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:21:52,556 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:21:52,662 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:21:52,709 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:21:52,736 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:21:53,191 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '549#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:21:53,192 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:21:53,192 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:21:53,192 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-03 02:21:53,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928889955] [2022-11-03 02:21:53,192 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:21:53,220 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:21:53,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:53,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:21:53,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=241, Unknown=0, NotChecked=0, Total=306 [2022-11-03 02:21:53,221 INFO L87 Difference]: Start difference. First operand 36 states and 44 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:53,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:53,709 INFO L93 Difference]: Finished difference Result 78 states and 90 transitions. [2022-11-03 02:21:53,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:21:53,714 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-03 02:21:53,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:53,715 INFO L225 Difference]: With dead ends: 78 [2022-11-03 02:21:53,715 INFO L226 Difference]: Without dead ends: 78 [2022-11-03 02:21:53,716 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:21:53,716 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 350 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:53,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 104 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:21:53,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-03 02:21:53,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 34. [2022-11-03 02:21:53,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 24 states have (on average 1.75) internal successors, (42), 33 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:53,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 42 transitions. [2022-11-03 02:21:53,723 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 42 transitions. Word has length 6 [2022-11-03 02:21:53,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:53,723 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 42 transitions. [2022-11-03 02:21:53,728 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:53,728 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 42 transitions. [2022-11-03 02:21:53,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-03 02:21:53,728 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:53,729 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-03 02:21:53,762 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:21:53,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-03 02:21:53,930 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:53,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:53,930 INFO L85 PathProgramCache]: Analyzing trace with hash 226621346, now seen corresponding path program 1 times [2022-11-03 02:21:53,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:53,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1163969489] [2022-11-03 02:21:53,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:53,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:53,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:54,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:54,138 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:54,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1163969489] [2022-11-03 02:21:54,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1163969489] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:54,138 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:54,138 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:21:54,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981909141] [2022-11-03 02:21:54,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:54,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:21:54,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:54,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:21:54,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:21:54,140 INFO L87 Difference]: Start difference. First operand 34 states and 42 transitions. Second operand has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:54,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:54,335 INFO L93 Difference]: Finished difference Result 53 states and 62 transitions. [2022-11-03 02:21:54,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:21:54,336 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-03 02:21:54,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:54,336 INFO L225 Difference]: With dead ends: 53 [2022-11-03 02:21:54,337 INFO L226 Difference]: Without dead ends: 53 [2022-11-03 02:21:54,337 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:21:54,337 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 115 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:54,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 27 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:21:54,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-11-03 02:21:54,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 37. [2022-11-03 02:21:54,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 27 states have (on average 1.7037037037037037) internal successors, (46), 36 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:54,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 46 transitions. [2022-11-03 02:21:54,341 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 46 transitions. Word has length 6 [2022-11-03 02:21:54,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:54,341 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 46 transitions. [2022-11-03 02:21:54,341 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:54,341 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 46 transitions. [2022-11-03 02:21:54,341 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:21:54,342 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:54,342 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:21:54,342 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-03 02:21:54,342 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:54,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:54,343 INFO L85 PathProgramCache]: Analyzing trace with hash -1646210956, now seen corresponding path program 1 times [2022-11-03 02:21:54,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:54,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [787087736] [2022-11-03 02:21:54,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:54,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:54,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:54,631 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:54,632 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:54,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [787087736] [2022-11-03 02:21:54,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [787087736] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:54,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [830369321] [2022-11-03 02:21:54,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:54,633 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:54,633 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:21:54,634 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:21:54,662 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:21:54,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:54,712 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 19 conjunts are in the unsatisfiable core [2022-11-03 02:21:54,715 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:21:54,764 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:21:54,765 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:21:54,774 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:21:54,862 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:54,862 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:21:54,934 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:21:54,952 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:54,953 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [830369321] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:54,953 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-03 02:21:54,953 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5, 3] total 11 [2022-11-03 02:21:54,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80286816] [2022-11-03 02:21:54,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:54,954 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:21:54,954 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:54,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:21:54,955 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:21:54,955 INFO L87 Difference]: Start difference. First operand 37 states and 46 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:55,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:55,039 INFO L93 Difference]: Finished difference Result 37 states and 44 transitions. [2022-11-03 02:21:55,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:21:55,039 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:21:55,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:55,040 INFO L225 Difference]: With dead ends: 37 [2022-11-03 02:21:55,040 INFO L226 Difference]: Without dead ends: 37 [2022-11-03 02:21:55,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-11-03 02:21:55,042 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 55 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:55,043 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 11 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:21:55,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-03 02:21:55,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 29. [2022-11-03 02:21:55,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 20 states have (on average 1.65) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:55,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-03 02:21:55,048 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 7 [2022-11-03 02:21:55,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:55,048 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-03 02:21:55,048 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:55,048 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-03 02:21:55,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:21:55,049 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:55,049 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-11-03 02:21:55,089 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:21:55,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:55,264 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:55,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:55,264 INFO L85 PathProgramCache]: Analyzing trace with hash -1566735583, now seen corresponding path program 1 times [2022-11-03 02:21:55,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:55,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646477168] [2022-11-03 02:21:55,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:55,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:55,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:55,474 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:55,474 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:55,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646477168] [2022-11-03 02:21:55,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [646477168] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:55,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1981067356] [2022-11-03 02:21:55,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:55,475 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:55,475 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:21:55,476 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:21:55,505 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:21:55,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:55,553 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-03 02:21:55,556 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:21:55,612 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:21:55,612 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:21:55,751 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:55,751 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:21:55,912 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:55,913 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1981067356] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:21:55,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1647871921] [2022-11-03 02:21:55,915 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-11-03 02:21:55,915 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:21:55,915 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:21:55,916 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:21:55,916 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:21:55,962 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:21:55,965 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:21:55,966 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:21:56,040 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:21:56,105 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:21:56,139 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:21:56,162 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:21:56,868 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '948#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:21:56,869 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:21:56,869 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:21:56,869 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-03 02:21:56,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1241088732] [2022-11-03 02:21:56,869 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:21:56,869 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-03 02:21:56,869 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:56,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-03 02:21:56,870 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=87, Invalid=375, Unknown=0, NotChecked=0, Total=462 [2022-11-03 02:21:56,870 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:57,483 INFO L93 Difference]: Finished difference Result 63 states and 70 transitions. [2022-11-03 02:21:57,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 02:21:57,483 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:21:57,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:57,484 INFO L225 Difference]: With dead ends: 63 [2022-11-03 02:21:57,484 INFO L226 Difference]: Without dead ends: 63 [2022-11-03 02:21:57,484 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=188, Invalid=624, Unknown=0, NotChecked=0, Total=812 [2022-11-03 02:21:57,485 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 427 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 427 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:57,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [427 Valid, 88 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:21:57,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-03 02:21:57,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 27. [2022-11-03 02:21:57,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 19 states have (on average 1.631578947368421) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-11-03 02:21:57,487 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 7 [2022-11-03 02:21:57,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:57,488 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-11-03 02:21:57,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,488 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-11-03 02:21:57,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:21:57,488 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:57,488 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:21:57,515 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:21:57,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:57,698 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:57,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:57,699 INFO L85 PathProgramCache]: Analyzing trace with hash -1564671430, now seen corresponding path program 1 times [2022-11-03 02:21:57,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:57,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2032263757] [2022-11-03 02:21:57,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:57,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:57,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:57,734 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:57,734 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:57,734 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2032263757] [2022-11-03 02:21:57,735 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2032263757] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:57,735 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:57,735 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:21:57,735 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356797725] [2022-11-03 02:21:57,735 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:57,736 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:21:57,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:57,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:21:57,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:57,736 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:57,762 INFO L93 Difference]: Finished difference Result 26 states and 30 transitions. [2022-11-03 02:21:57,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:21:57,762 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:21:57,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:57,763 INFO L225 Difference]: With dead ends: 26 [2022-11-03 02:21:57,763 INFO L226 Difference]: Without dead ends: 26 [2022-11-03 02:21:57,763 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:21:57,764 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 11 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:57,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 14 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:21:57,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-11-03 02:21:57,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 26. [2022-11-03 02:21:57,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 25 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 30 transitions. [2022-11-03 02:21:57,767 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 30 transitions. Word has length 7 [2022-11-03 02:21:57,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:57,767 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 30 transitions. [2022-11-03 02:21:57,767 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,767 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 30 transitions. [2022-11-03 02:21:57,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:21:57,768 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:57,768 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:21:57,768 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-03 02:21:57,768 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:57,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:57,769 INFO L85 PathProgramCache]: Analyzing trace with hash -1564671429, now seen corresponding path program 1 times [2022-11-03 02:21:57,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:57,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2074023350] [2022-11-03 02:21:57,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:57,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:57,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:57,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:57,866 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:57,866 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2074023350] [2022-11-03 02:21:57,866 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2074023350] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:21:57,866 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:21:57,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:21:57,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [882109596] [2022-11-03 02:21:57,867 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:57,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:21:57,867 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:57,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:21:57,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:21:57,868 INFO L87 Difference]: Start difference. First operand 26 states and 30 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:57,907 INFO L93 Difference]: Finished difference Result 29 states and 34 transitions. [2022-11-03 02:21:57,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:21:57,907 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:21:57,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:57,908 INFO L225 Difference]: With dead ends: 29 [2022-11-03 02:21:57,908 INFO L226 Difference]: Without dead ends: 29 [2022-11-03 02:21:57,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:21:57,909 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 25 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:57,909 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 23 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:21:57,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-03 02:21:57,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 27. [2022-11-03 02:21:57,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.55) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-11-03 02:21:57,912 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 7 [2022-11-03 02:21:57,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:57,912 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-11-03 02:21:57,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:57,912 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-11-03 02:21:57,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-03 02:21:57,913 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:57,913 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:21:57,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-03 02:21:57,913 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:57,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:57,914 INFO L85 PathProgramCache]: Analyzing trace with hash -1324094303, now seen corresponding path program 1 times [2022-11-03 02:21:57,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:57,914 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309132147] [2022-11-03 02:21:57,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:57,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:57,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:58,125 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:58,126 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:58,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309132147] [2022-11-03 02:21:58,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309132147] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:58,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [449295491] [2022-11-03 02:21:58,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:58,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:58,127 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:21:58,128 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:21:58,154 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:21:58,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:58,239 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-03 02:21:58,241 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:21:58,308 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:21:58,309 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:21:58,635 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:58,635 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:21:58,867 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:58,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [449295491] provided 1 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:58,867 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-11-03 02:21:58,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [5, 6] total 17 [2022-11-03 02:21:58,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1470734811] [2022-11-03 02:21:58,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:21:58,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:21:58,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:21:58,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:21:58,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=250, Unknown=0, NotChecked=0, Total=342 [2022-11-03 02:21:58,869 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:59,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:21:59,092 INFO L93 Difference]: Finished difference Result 27 states and 31 transitions. [2022-11-03 02:21:59,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:21:59,093 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-03 02:21:59,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:21:59,093 INFO L225 Difference]: With dead ends: 27 [2022-11-03 02:21:59,093 INFO L226 Difference]: Without dead ends: 27 [2022-11-03 02:21:59,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=132, Invalid=420, Unknown=0, NotChecked=0, Total=552 [2022-11-03 02:21:59,094 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 82 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:21:59,094 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 7 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:21:59,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-11-03 02:21:59,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 23. [2022-11-03 02:21:59,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:59,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-03 02:21:59,096 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 8 [2022-11-03 02:21:59,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:21:59,096 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-03 02:21:59,096 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:21:59,096 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-03 02:21:59,097 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-03 02:21:59,097 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:21:59,097 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:21:59,129 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:21:59,297 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-03 02:21:59,298 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:21:59,298 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:21:59,298 INFO L85 PathProgramCache]: Analyzing trace with hash -410688015, now seen corresponding path program 1 times [2022-11-03 02:21:59,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:21:59,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [859056261] [2022-11-03 02:21:59,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:59,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:21:59,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:59,730 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:21:59,730 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:21:59,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [859056261] [2022-11-03 02:21:59,731 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [859056261] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:21:59,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [967719974] [2022-11-03 02:21:59,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:21:59,731 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:21:59,731 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:21:59,732 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:21:59,740 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 02:21:59,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:21:59,828 INFO L263 TraceCheckSpWp]: Trace formula consists of 107 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-03 02:21:59,833 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:21:59,857 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:21:59,857 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:21:59,895 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:21:59,972 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:21:59,972 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-03 02:22:00,072 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:00,073 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:00,179 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:22:00,187 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-03 02:22:00,245 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:00,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [967719974] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:00,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [100667508] [2022-11-03 02:22:00,248 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-11-03 02:22:00,248 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:00,248 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:00,249 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:00,249 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:00,314 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:00,316 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:00,318 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:00,415 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:00,492 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:00,494 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:00,640 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:02,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [100667508] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:02,812 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:02,813 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [6, 5, 5] total 22 [2022-11-03 02:22:02,813 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170409317] [2022-11-03 02:22:02,814 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:02,814 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:22:02,814 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:02,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:22:02,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:22:02,815 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:03,147 INFO L93 Difference]: Finished difference Result 65 states and 73 transitions. [2022-11-03 02:22:03,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 02:22:03,148 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-03 02:22:03,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:03,149 INFO L225 Difference]: With dead ends: 65 [2022-11-03 02:22:03,149 INFO L226 Difference]: Without dead ends: 62 [2022-11-03 02:22:03,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:22:03,150 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 56 mSDsluCounter, 25 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:03,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 24 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:22:03,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-03 02:22:03,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 40. [2022-11-03 02:22:03,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 34 states have (on average 1.5294117647058822) internal successors, (52), 39 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 52 transitions. [2022-11-03 02:22:03,154 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 52 transitions. Word has length 9 [2022-11-03 02:22:03,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:03,154 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 52 transitions. [2022-11-03 02:22:03,154 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,155 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 52 transitions. [2022-11-03 02:22:03,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-03 02:22:03,155 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:03,155 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:03,192 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:03,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-03 02:22:03,370 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:03,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:03,371 INFO L85 PathProgramCache]: Analyzing trace with hash 153538389, now seen corresponding path program 1 times [2022-11-03 02:22:03,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:03,371 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1781771553] [2022-11-03 02:22:03,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:03,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:03,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:03,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:03,422 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:03,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1781771553] [2022-11-03 02:22:03,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1781771553] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:03,423 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:03,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:22:03,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723033645] [2022-11-03 02:22:03,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:03,424 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:22:03,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:03,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:22:03,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:22:03,425 INFO L87 Difference]: Start difference. First operand 40 states and 52 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:03,473 INFO L93 Difference]: Finished difference Result 39 states and 50 transitions. [2022-11-03 02:22:03,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:22:03,473 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-03 02:22:03,474 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:03,474 INFO L225 Difference]: With dead ends: 39 [2022-11-03 02:22:03,474 INFO L226 Difference]: Without dead ends: 39 [2022-11-03 02:22:03,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:22:03,475 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 32 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:03,475 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 15 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:22:03,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-11-03 02:22:03,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2022-11-03 02:22:03,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 38 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 50 transitions. [2022-11-03 02:22:03,478 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 50 transitions. Word has length 10 [2022-11-03 02:22:03,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:03,479 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 50 transitions. [2022-11-03 02:22:03,479 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,479 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 50 transitions. [2022-11-03 02:22:03,479 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-03 02:22:03,479 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:03,480 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:03,480 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-03 02:22:03,480 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:03,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:03,481 INFO L85 PathProgramCache]: Analyzing trace with hash 153538390, now seen corresponding path program 1 times [2022-11-03 02:22:03,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:03,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868042312] [2022-11-03 02:22:03,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:03,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:03,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:03,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:03,602 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:03,602 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868042312] [2022-11-03 02:22:03,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868042312] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:03,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:03,603 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:22:03,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1084143988] [2022-11-03 02:22:03,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:03,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:22:03,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:03,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:22:03,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:22:03,605 INFO L87 Difference]: Start difference. First operand 39 states and 50 transitions. Second operand has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:03,687 INFO L93 Difference]: Finished difference Result 50 states and 64 transitions. [2022-11-03 02:22:03,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:22:03,688 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-03 02:22:03,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:03,688 INFO L225 Difference]: With dead ends: 50 [2022-11-03 02:22:03,689 INFO L226 Difference]: Without dead ends: 50 [2022-11-03 02:22:03,689 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:22:03,690 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 36 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:03,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 27 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:22:03,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-03 02:22:03,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 43. [2022-11-03 02:22:03,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.4210526315789473) internal successors, (54), 42 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-11-03 02:22:03,693 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 10 [2022-11-03 02:22:03,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:03,693 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-11-03 02:22:03,694 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:03,694 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-11-03 02:22:03,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-03 02:22:03,694 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:03,695 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:03,695 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-03 02:22:03,695 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:03,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:03,696 INFO L85 PathProgramCache]: Analyzing trace with hash 661807299, now seen corresponding path program 1 times [2022-11-03 02:22:03,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:03,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1987730286] [2022-11-03 02:22:03,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:03,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:03,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:04,000 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:04,000 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:04,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1987730286] [2022-11-03 02:22:04,000 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1987730286] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:04,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1991956735] [2022-11-03 02:22:04,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:04,001 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:04,001 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:04,003 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:04,016 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-03 02:22:04,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:04,099 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:22:04,100 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:04,199 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:22:04,242 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:04,244 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:22:04,248 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-03 02:22:04,267 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:04,268 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:22:04,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1991956735] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:04,268 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:22:04,268 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [6] total 13 [2022-11-03 02:22:04,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2023169131] [2022-11-03 02:22:04,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:04,270 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:22:04,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:04,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:22:04,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-11-03 02:22:04,271 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 8 states, 8 states have (on average 1.375) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:04,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:04,347 INFO L93 Difference]: Finished difference Result 50 states and 62 transitions. [2022-11-03 02:22:04,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:22:04,347 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 1.375) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-03 02:22:04,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:04,348 INFO L225 Difference]: With dead ends: 50 [2022-11-03 02:22:04,348 INFO L226 Difference]: Without dead ends: 50 [2022-11-03 02:22:04,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=195, Unknown=0, NotChecked=0, Total=240 [2022-11-03 02:22:04,349 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 17 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 17 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:04,349 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 66 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 46 Invalid, 0 Unknown, 17 Unchecked, 0.0s Time] [2022-11-03 02:22:04,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-03 02:22:04,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 48. [2022-11-03 02:22:04,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.3953488372093024) internal successors, (60), 47 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:04,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2022-11-03 02:22:04,351 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 11 [2022-11-03 02:22:04,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:04,352 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2022-11-03 02:22:04,352 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 1.375) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:04,352 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2022-11-03 02:22:04,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-03 02:22:04,352 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:04,352 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:04,395 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:04,562 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-03 02:22:04,562 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:04,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:04,563 INFO L85 PathProgramCache]: Analyzing trace with hash -1112351598, now seen corresponding path program 1 times [2022-11-03 02:22:04,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:04,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827620910] [2022-11-03 02:22:04,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:04,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:04,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:04,781 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:04,781 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:04,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827620910] [2022-11-03 02:22:04,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827620910] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:04,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1962265951] [2022-11-03 02:22:04,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:04,783 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:04,783 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:04,784 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:04,810 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-03 02:22:04,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:04,868 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-03 02:22:04,869 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:04,905 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:22:04,906 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:22:04,968 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:04,968 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:05,068 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:05,069 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1962265951] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:05,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [141198395] [2022-11-03 02:22:05,071 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:22:05,071 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:05,072 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:05,072 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:05,072 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:05,121 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:05,124 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:05,125 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:05,187 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:05,259 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:05,300 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:05,372 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:05,440 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:05,441 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:05,646 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:06,865 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1884#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:06,866 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:06,867 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:06,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 6] total 16 [2022-11-03 02:22:06,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [781439397] [2022-11-03 02:22:06,867 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:06,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-03 02:22:06,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:06,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-03 02:22:06,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=499, Unknown=0, NotChecked=0, Total=600 [2022-11-03 02:22:06,869 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:07,131 INFO L93 Difference]: Finished difference Result 91 states and 112 transitions. [2022-11-03 02:22:07,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-03 02:22:07,132 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-03 02:22:07,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:07,133 INFO L225 Difference]: With dead ends: 91 [2022-11-03 02:22:07,133 INFO L226 Difference]: Without dead ends: 91 [2022-11-03 02:22:07,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=155, Invalid=715, Unknown=0, NotChecked=0, Total=870 [2022-11-03 02:22:07,134 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 148 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 183 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 93 SdHoareTripleChecker+Invalid, 219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 183 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:07,134 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 93 Invalid, 219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 183 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:22:07,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-03 02:22:07,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 52. [2022-11-03 02:22:07,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.4042553191489362) internal successors, (66), 51 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 66 transitions. [2022-11-03 02:22:07,138 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 66 transitions. Word has length 11 [2022-11-03 02:22:07,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:07,138 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 66 transitions. [2022-11-03 02:22:07,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,138 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 66 transitions. [2022-11-03 02:22:07,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-03 02:22:07,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:07,139 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:07,166 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:07,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-03 02:22:07,351 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:07,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:07,351 INFO L85 PathProgramCache]: Analyzing trace with hash 464722824, now seen corresponding path program 1 times [2022-11-03 02:22:07,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:07,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [863031390] [2022-11-03 02:22:07,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:07,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:07,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:07,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:07,397 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:07,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [863031390] [2022-11-03 02:22:07,399 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [863031390] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:07,399 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:07,400 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:22:07,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1323715379] [2022-11-03 02:22:07,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:07,400 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:22:07,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:07,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:22:07,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:22:07,401 INFO L87 Difference]: Start difference. First operand 52 states and 66 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:07,445 INFO L93 Difference]: Finished difference Result 51 states and 64 transitions. [2022-11-03 02:22:07,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:22:07,446 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-03 02:22:07,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:07,448 INFO L225 Difference]: With dead ends: 51 [2022-11-03 02:22:07,448 INFO L226 Difference]: Without dead ends: 51 [2022-11-03 02:22:07,449 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:22:07,449 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:07,450 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 14 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:22:07,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-11-03 02:22:07,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-11-03 02:22:07,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3617021276595744) internal successors, (64), 50 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 64 transitions. [2022-11-03 02:22:07,461 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 64 transitions. Word has length 11 [2022-11-03 02:22:07,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:07,461 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 64 transitions. [2022-11-03 02:22:07,461 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,461 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 64 transitions. [2022-11-03 02:22:07,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-03 02:22:07,464 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:07,464 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:07,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-03 02:22:07,465 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:07,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:07,468 INFO L85 PathProgramCache]: Analyzing trace with hash 464722825, now seen corresponding path program 1 times [2022-11-03 02:22:07,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:07,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1358570093] [2022-11-03 02:22:07,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:07,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:07,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:07,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:07,606 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:07,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1358570093] [2022-11-03 02:22:07,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1358570093] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:07,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:07,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:22:07,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2040465622] [2022-11-03 02:22:07,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:07,607 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:22:07,608 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:07,608 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:22:07,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:22:07,609 INFO L87 Difference]: Start difference. First operand 51 states and 64 transitions. Second operand has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:07,674 INFO L93 Difference]: Finished difference Result 59 states and 73 transitions. [2022-11-03 02:22:07,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:22:07,675 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-03 02:22:07,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:07,676 INFO L225 Difference]: With dead ends: 59 [2022-11-03 02:22:07,676 INFO L226 Difference]: Without dead ends: 59 [2022-11-03 02:22:07,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:22:07,678 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 25 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:07,678 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 21 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:22:07,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-03 02:22:07,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 57. [2022-11-03 02:22:07,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 53 states have (on average 1.320754716981132) internal successors, (70), 56 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 70 transitions. [2022-11-03 02:22:07,686 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 70 transitions. Word has length 11 [2022-11-03 02:22:07,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:07,686 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 70 transitions. [2022-11-03 02:22:07,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:07,687 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 70 transitions. [2022-11-03 02:22:07,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:22:07,689 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:07,689 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:07,689 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-11-03 02:22:07,690 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:07,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:07,690 INFO L85 PathProgramCache]: Analyzing trace with hash 476972680, now seen corresponding path program 2 times [2022-11-03 02:22:07,690 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:07,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1699056576] [2022-11-03 02:22:07,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:07,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:07,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:08,095 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:08,095 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:08,095 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1699056576] [2022-11-03 02:22:08,095 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1699056576] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:08,095 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [853036448] [2022-11-03 02:22:08,095 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:22:08,095 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:08,095 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:08,097 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:08,122 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-03 02:22:08,193 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:22:08,193 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:22:08,195 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-03 02:22:08,200 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:08,215 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:22:08,216 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:22:08,298 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:09,489 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:22:09,489 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 15 [2022-11-03 02:22:09,543 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:09,544 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:09,709 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:22:09,715 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:22:09,916 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:09,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [853036448] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:09,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1873810647] [2022-11-03 02:22:09,918 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:22:09,919 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:09,919 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:09,919 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:09,919 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:09,979 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:09,982 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:09,984 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:10,046 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:10,121 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:10,168 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:10,243 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:10,312 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:10,312 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:10,478 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:11,773 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2373#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:11,773 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:11,773 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:11,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 22 [2022-11-03 02:22:11,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449895770] [2022-11-03 02:22:11,773 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:11,774 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:22:11,774 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:11,774 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:22:11,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=141, Invalid=789, Unknown=0, NotChecked=0, Total=930 [2022-11-03 02:22:11,775 INFO L87 Difference]: Start difference. First operand 57 states and 70 transitions. Second operand has 23 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 23 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:12,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:12,531 INFO L93 Difference]: Finished difference Result 100 states and 120 transitions. [2022-11-03 02:22:12,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:22:12,532 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 23 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:22:12,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:12,533 INFO L225 Difference]: With dead ends: 100 [2022-11-03 02:22:12,533 INFO L226 Difference]: Without dead ends: 100 [2022-11-03 02:22:12,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 295 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=250, Invalid=1310, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:22:12,534 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 72 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 358 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 389 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 358 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 9 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:12,535 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 117 Invalid, 389 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 358 Invalid, 0 Unknown, 9 Unchecked, 0.3s Time] [2022-11-03 02:22:12,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-11-03 02:22:12,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 61. [2022-11-03 02:22:12,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 60 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:12,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 76 transitions. [2022-11-03 02:22:12,537 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 76 transitions. Word has length 13 [2022-11-03 02:22:12,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:12,538 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 76 transitions. [2022-11-03 02:22:12,538 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 23 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:12,538 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 76 transitions. [2022-11-03 02:22:12,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2022-11-03 02:22:12,539 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:12,539 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:12,564 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:12,746 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-11-03 02:22:12,746 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:12,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:12,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1878121950, now seen corresponding path program 1 times [2022-11-03 02:22:12,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:12,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340036532] [2022-11-03 02:22:12,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:12,747 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:12,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:13,127 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:13,127 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:13,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340036532] [2022-11-03 02:22:13,128 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340036532] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:13,128 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:13,128 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-03 02:22:13,128 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26631213] [2022-11-03 02:22:13,128 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:13,128 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 02:22:13,129 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:13,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 02:22:13,129 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:22:13,130 INFO L87 Difference]: Start difference. First operand 61 states and 76 transitions. Second operand has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:13,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:13,443 INFO L93 Difference]: Finished difference Result 68 states and 79 transitions. [2022-11-03 02:22:13,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-03 02:22:13,444 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 14 [2022-11-03 02:22:13,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:13,445 INFO L225 Difference]: With dead ends: 68 [2022-11-03 02:22:13,445 INFO L226 Difference]: Without dead ends: 60 [2022-11-03 02:22:13,445 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2022-11-03 02:22:13,446 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 32 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:13,446 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 79 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:22:13,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-03 02:22:13,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 54. [2022-11-03 02:22:13,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.34) internal successors, (67), 53 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:13,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 67 transitions. [2022-11-03 02:22:13,448 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 67 transitions. Word has length 14 [2022-11-03 02:22:13,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:13,448 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 67 transitions. [2022-11-03 02:22:13,449 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:13,449 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 67 transitions. [2022-11-03 02:22:13,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:22:13,449 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:13,449 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:13,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-11-03 02:22:13,450 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:13,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:13,451 INFO L85 PathProgramCache]: Analyzing trace with hash -1190753538, now seen corresponding path program 3 times [2022-11-03 02:22:13,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:13,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [511589718] [2022-11-03 02:22:13,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:13,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:13,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:13,797 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:13,797 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:13,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [511589718] [2022-11-03 02:22:13,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [511589718] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:13,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1159208475] [2022-11-03 02:22:13,798 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:22:13,798 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:13,798 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:13,799 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:13,810 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-03 02:22:13,904 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:22:13,904 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:22:13,906 INFO L263 TraceCheckSpWp]: Trace formula consists of 142 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-03 02:22:13,908 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:13,982 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:14,113 INFO L356 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-11-03 02:22:14,114 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 18 [2022-11-03 02:22:14,118 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:14,118 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:14,187 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-11-03 02:22:14,193 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-11-03 02:22:14,326 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:14,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1159208475] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:14,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [473245676] [2022-11-03 02:22:14,328 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:22:14,328 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:14,328 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:14,328 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:14,328 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:14,380 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:14,384 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:14,385 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:14,448 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:14,514 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:14,566 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:14,632 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:14,692 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:14,693 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:14,863 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:16,211 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2811#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:16,212 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:16,212 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:16,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-03 02:22:16,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1717948106] [2022-11-03 02:22:16,212 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:16,212 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-03 02:22:16,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:16,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-03 02:22:16,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=114, Invalid=756, Unknown=0, NotChecked=0, Total=870 [2022-11-03 02:22:16,214 INFO L87 Difference]: Start difference. First operand 54 states and 67 transitions. Second operand has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:16,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:16,744 INFO L93 Difference]: Finished difference Result 72 states and 88 transitions. [2022-11-03 02:22:16,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:22:16,744 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:22:16,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:16,745 INFO L225 Difference]: With dead ends: 72 [2022-11-03 02:22:16,745 INFO L226 Difference]: Without dead ends: 72 [2022-11-03 02:22:16,746 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 24 SyntacticMatches, 1 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 400 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=258, Invalid=1302, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:22:16,746 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 62 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 11 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:16,747 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 103 Invalid, 174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 144 Invalid, 0 Unknown, 11 Unchecked, 0.1s Time] [2022-11-03 02:22:16,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-11-03 02:22:16,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 70. [2022-11-03 02:22:16,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 66 states have (on average 1.303030303030303) internal successors, (86), 69 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:16,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 86 transitions. [2022-11-03 02:22:16,749 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 86 transitions. Word has length 15 [2022-11-03 02:22:16,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:16,749 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 86 transitions. [2022-11-03 02:22:16,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:16,749 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 86 transitions. [2022-11-03 02:22:16,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:22:16,750 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:16,750 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:16,790 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:16,958 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-03 02:22:16,958 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:16,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:16,959 INFO L85 PathProgramCache]: Analyzing trace with hash -1191841184, now seen corresponding path program 1 times [2022-11-03 02:22:16,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:16,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [128490870] [2022-11-03 02:22:16,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:16,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:16,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:17,152 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:17,152 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:17,152 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [128490870] [2022-11-03 02:22:17,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [128490870] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:17,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1769166620] [2022-11-03 02:22:17,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:17,153 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:17,153 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:17,154 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:17,174 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-03 02:22:17,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:17,247 INFO L263 TraceCheckSpWp]: Trace formula consists of 150 conjuncts, 21 conjunts are in the unsatisfiable core [2022-11-03 02:22:17,249 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:17,322 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:17,322 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:17,433 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:22:17,455 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:17,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1769166620] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:17,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [862113253] [2022-11-03 02:22:17,457 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-11-03 02:22:17,457 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:17,458 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:17,458 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:17,458 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:17,498 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:17,500 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:17,501 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:17,557 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:17,600 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:17,624 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:17,671 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:17,671 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:17,884 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:19,507 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [862113253] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:19,507 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:19,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 7, 7] total 25 [2022-11-03 02:22:19,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1038291158] [2022-11-03 02:22:19,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:19,508 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:22:19,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:19,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:22:19,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=97, Invalid=553, Unknown=0, NotChecked=0, Total=650 [2022-11-03 02:22:19,509 INFO L87 Difference]: Start difference. First operand 70 states and 86 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:23,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:23,190 INFO L93 Difference]: Finished difference Result 75 states and 88 transitions. [2022-11-03 02:22:23,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:22:23,191 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:22:23,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:23,191 INFO L225 Difference]: With dead ends: 75 [2022-11-03 02:22:23,191 INFO L226 Difference]: Without dead ends: 75 [2022-11-03 02:22:23,192 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 23 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 194 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2022-11-03 02:22:23,192 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 42 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 43 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:23,193 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 43 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:22:23,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-03 02:22:23,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-11-03 02:22:23,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 70 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:23,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 87 transitions. [2022-11-03 02:22:23,195 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 87 transitions. Word has length 15 [2022-11-03 02:22:23,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:23,196 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 87 transitions. [2022-11-03 02:22:23,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:23,196 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 87 transitions. [2022-11-03 02:22:23,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-03 02:22:23,196 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:23,197 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:23,226 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:23,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:23,410 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:23,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:23,411 INFO L85 PathProgramCache]: Analyzing trace with hash 1164628604, now seen corresponding path program 1 times [2022-11-03 02:22:23,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:23,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678218995] [2022-11-03 02:22:23,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:23,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:23,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:23,617 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:23,617 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:23,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678218995] [2022-11-03 02:22:23,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678218995] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:23,618 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:23,618 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:22:23,618 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887811852] [2022-11-03 02:22:23,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:23,619 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:22:23,619 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:23,619 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:22:23,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:22:23,620 INFO L87 Difference]: Start difference. First operand 71 states and 87 transitions. Second operand has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:23,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:23,650 INFO L93 Difference]: Finished difference Result 70 states and 86 transitions. [2022-11-03 02:22:23,650 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:22:23,651 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-03 02:22:23,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:23,651 INFO L225 Difference]: With dead ends: 70 [2022-11-03 02:22:23,651 INFO L226 Difference]: Without dead ends: 68 [2022-11-03 02:22:23,652 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:22:23,652 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 7 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:23,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 18 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:22:23,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-03 02:22:23,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 59. [2022-11-03 02:22:23,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 58 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:23,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 73 transitions. [2022-11-03 02:22:23,655 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 73 transitions. Word has length 16 [2022-11-03 02:22:23,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:23,655 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 73 transitions. [2022-11-03 02:22:23,655 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:23,656 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 73 transitions. [2022-11-03 02:22:23,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-03 02:22:23,656 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:23,656 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:23,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-11-03 02:22:23,657 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:23,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:23,657 INFO L85 PathProgramCache]: Analyzing trace with hash 1164629580, now seen corresponding path program 1 times [2022-11-03 02:22:23,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:23,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [26211786] [2022-11-03 02:22:23,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:23,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:23,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:23,895 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:23,895 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:23,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [26211786] [2022-11-03 02:22:23,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [26211786] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:23,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [133435427] [2022-11-03 02:22:23,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:23,896 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:23,896 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:23,897 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:23,914 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-03 02:22:24,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:24,010 INFO L263 TraceCheckSpWp]: Trace formula consists of 164 conjuncts, 24 conjunts are in the unsatisfiable core [2022-11-03 02:22:24,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:24,123 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:24,123 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:24,283 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:22:24,315 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:24,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [133435427] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:24,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1217129467] [2022-11-03 02:22:24,318 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:22:24,318 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:24,318 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:24,318 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:24,318 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:24,367 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:24,370 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:24,372 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:24,417 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:24,484 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:24,508 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:24,568 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:24,632 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:24,632 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:24,769 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:24,771 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:24,808 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:22:24,809 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:22:24,950 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:25,052 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:25,174 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:28,052 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3498#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:28,052 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:28,052 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:28,052 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-11-03 02:22:28,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118184641] [2022-11-03 02:22:28,053 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:28,053 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-03 02:22:28,053 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:28,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-03 02:22:28,054 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=923, Unknown=0, NotChecked=0, Total=1056 [2022-11-03 02:22:28,054 INFO L87 Difference]: Start difference. First operand 59 states and 73 transitions. Second operand has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:28,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:28,497 INFO L93 Difference]: Finished difference Result 80 states and 93 transitions. [2022-11-03 02:22:28,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 02:22:28,497 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-03 02:22:28,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:28,498 INFO L225 Difference]: With dead ends: 80 [2022-11-03 02:22:28,498 INFO L226 Difference]: Without dead ends: 80 [2022-11-03 02:22:28,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 386 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=223, Invalid=1417, Unknown=0, NotChecked=0, Total=1640 [2022-11-03 02:22:28,499 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 170 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 285 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 306 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:28,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 61 Invalid, 306 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 285 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:22:28,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-03 02:22:28,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 68. [2022-11-03 02:22:28,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2769230769230768) internal successors, (83), 67 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:28,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 83 transitions. [2022-11-03 02:22:28,502 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 83 transitions. Word has length 16 [2022-11-03 02:22:28,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:28,502 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 83 transitions. [2022-11-03 02:22:28,503 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:28,503 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 83 transitions. [2022-11-03 02:22:28,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:22:28,503 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:28,503 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:28,545 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:28,718 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-03 02:22:28,718 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:28,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:28,719 INFO L85 PathProgramCache]: Analyzing trace with hash -1835268174, now seen corresponding path program 1 times [2022-11-03 02:22:28,719 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:28,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902687301] [2022-11-03 02:22:28,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:28,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:28,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:28,905 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:22:28,906 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:28,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902687301] [2022-11-03 02:22:28,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1902687301] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:28,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1100948934] [2022-11-03 02:22:28,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:28,907 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:28,907 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:28,911 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:28,935 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-03 02:22:29,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:29,018 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-03 02:22:29,021 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:29,032 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:22:29,032 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:22:29,110 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:29,110 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:29,251 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:29,251 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1100948934] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:29,251 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1397477082] [2022-11-03 02:22:29,253 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:22:29,253 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:29,253 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:29,253 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:29,254 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:29,301 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:29,304 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:29,305 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:29,351 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:29,403 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:29,433 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:29,511 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:29,543 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:29,567 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:29,604 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:29,604 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:29,791 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:31,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1397477082] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:31,386 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:31,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [6, 7, 7] total 28 [2022-11-03 02:22:31,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881674712] [2022-11-03 02:22:31,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:31,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:22:31,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:31,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:22:31,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=686, Unknown=0, NotChecked=0, Total=812 [2022-11-03 02:22:31,388 INFO L87 Difference]: Start difference. First operand 68 states and 83 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:33,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:33,040 INFO L93 Difference]: Finished difference Result 68 states and 82 transitions. [2022-11-03 02:22:33,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:22:33,041 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-03 02:22:33,041 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:33,041 INFO L225 Difference]: With dead ends: 68 [2022-11-03 02:22:33,042 INFO L226 Difference]: Without dead ends: 68 [2022-11-03 02:22:33,042 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 209 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=188, Invalid=934, Unknown=0, NotChecked=0, Total=1122 [2022-11-03 02:22:33,043 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 29 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:33,043 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 17 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:22:33,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-03 02:22:33,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 63. [2022-11-03 02:22:33,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 62 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:33,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 77 transitions. [2022-11-03 02:22:33,046 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 77 transitions. Word has length 17 [2022-11-03 02:22:33,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:33,046 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 77 transitions. [2022-11-03 02:22:33,046 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:33,046 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 77 transitions. [2022-11-03 02:22:33,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:22:33,047 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:33,047 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:33,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:33,258 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-03 02:22:33,258 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:33,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:33,259 INFO L85 PathProgramCache]: Analyzing trace with hash 1743778643, now seen corresponding path program 1 times [2022-11-03 02:22:33,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:33,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247073836] [2022-11-03 02:22:33,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:33,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:33,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:33,623 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:33,623 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:33,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247073836] [2022-11-03 02:22:33,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [247073836] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:33,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [681947432] [2022-11-03 02:22:33,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:33,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:33,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:33,625 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:33,654 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-03 02:22:33,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:33,745 INFO L263 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-03 02:22:33,747 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:33,806 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:22:33,807 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:22:34,231 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:34,232 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:34,567 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:34,567 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [681947432] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:34,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1552050822] [2022-11-03 02:22:34,569 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:22:34,569 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:34,569 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:34,569 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:34,569 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:34,610 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:34,612 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:34,613 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:34,661 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:34,711 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:34,737 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:34,805 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:34,865 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:34,865 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:35,008 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:35,009 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:35,047 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:22:35,048 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:22:35,177 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:35,297 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:35,385 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:37,947 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4061#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:37,947 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:37,947 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:37,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 22 [2022-11-03 02:22:37,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1252450988] [2022-11-03 02:22:37,947 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:37,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-03 02:22:37,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:37,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-03 02:22:37,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=1146, Unknown=0, NotChecked=0, Total=1332 [2022-11-03 02:22:37,949 INFO L87 Difference]: Start difference. First operand 63 states and 77 transitions. Second operand has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:39,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:39,514 INFO L93 Difference]: Finished difference Result 91 states and 104 transitions. [2022-11-03 02:22:39,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:22:39,514 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-03 02:22:39,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:39,515 INFO L225 Difference]: With dead ends: 91 [2022-11-03 02:22:39,515 INFO L226 Difference]: Without dead ends: 91 [2022-11-03 02:22:39,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 513 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=385, Invalid=2065, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 02:22:39,517 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 297 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 282 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 297 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 358 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 282 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:39,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [297 Valid, 37 Invalid, 358 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 282 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:22:39,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-03 02:22:39,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 79. [2022-11-03 02:22:39,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 76 states have (on average 1.236842105263158) internal successors, (94), 78 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:39,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 94 transitions. [2022-11-03 02:22:39,524 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 94 transitions. Word has length 17 [2022-11-03 02:22:39,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:39,524 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 94 transitions. [2022-11-03 02:22:39,524 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:39,524 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 94 transitions. [2022-11-03 02:22:39,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-03 02:22:39,525 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:39,525 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:39,548 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-03 02:22:39,727 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-03 02:22:39,728 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:39,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:39,728 INFO L85 PathProgramCache]: Analyzing trace with hash -577846049, now seen corresponding path program 4 times [2022-11-03 02:22:39,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:39,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1288463101] [2022-11-03 02:22:39,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:39,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:39,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:40,311 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:40,311 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:40,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1288463101] [2022-11-03 02:22:40,312 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1288463101] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:40,312 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [753118333] [2022-11-03 02:22:40,312 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:22:40,312 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:40,312 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:40,315 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:40,330 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-03 02:22:40,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:40,424 INFO L263 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-03 02:22:40,426 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:40,595 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:40,831 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:40,834 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:22:40,834 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:22:40,862 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:40,863 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:41,016 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:22:41,027 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-03 02:22:41,352 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:41,352 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [753118333] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:41,352 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [912992819] [2022-11-03 02:22:41,354 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:22:41,354 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:41,354 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:41,354 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:41,354 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:41,390 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:41,392 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:41,393 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:41,453 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:41,502 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:41,530 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:41,585 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:41,645 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:41,645 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:41,792 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:43,231 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4398#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:43,232 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:43,232 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:43,232 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 32 [2022-11-03 02:22:43,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1196531519] [2022-11-03 02:22:43,232 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:43,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-03 02:22:43,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:43,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-03 02:22:43,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=131, Invalid=1429, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:22:43,234 INFO L87 Difference]: Start difference. First operand 79 states and 94 transitions. Second operand has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:45,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:45,809 INFO L93 Difference]: Finished difference Result 192 states and 216 transitions. [2022-11-03 02:22:45,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-03 02:22:45,810 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-03 02:22:45,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:45,812 INFO L225 Difference]: With dead ends: 192 [2022-11-03 02:22:45,812 INFO L226 Difference]: Without dead ends: 192 [2022-11-03 02:22:45,813 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 847 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=445, Invalid=3845, Unknown=0, NotChecked=0, Total=4290 [2022-11-03 02:22:45,814 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 232 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 762 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 853 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 762 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 54 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:45,814 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 294 Invalid, 853 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 762 Invalid, 0 Unknown, 54 Unchecked, 0.6s Time] [2022-11-03 02:22:45,815 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-03 02:22:45,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 99. [2022-11-03 02:22:45,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 96 states have (on average 1.25) internal successors, (120), 98 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:45,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 120 transitions. [2022-11-03 02:22:45,819 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 120 transitions. Word has length 17 [2022-11-03 02:22:45,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:45,820 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 120 transitions. [2022-11-03 02:22:45,820 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:45,830 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 120 transitions. [2022-11-03 02:22:45,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:22:45,831 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:45,831 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:45,863 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:46,054 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-03 02:22:46,054 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:46,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:46,055 INFO L85 PathProgramCache]: Analyzing trace with hash 353960871, now seen corresponding path program 1 times [2022-11-03 02:22:46,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:46,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [580884443] [2022-11-03 02:22:46,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:46,055 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:46,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:46,316 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:22:46,316 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:46,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [580884443] [2022-11-03 02:22:46,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [580884443] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:22:46,317 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:22:46,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-03 02:22:46,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [297211973] [2022-11-03 02:22:46,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:22:46,319 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-03 02:22:46,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:46,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-03 02:22:46,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-03 02:22:46,320 INFO L87 Difference]: Start difference. First operand 99 states and 120 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:46,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:46,492 INFO L93 Difference]: Finished difference Result 105 states and 124 transitions. [2022-11-03 02:22:46,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:22:46,492 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-03 02:22:46,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:46,493 INFO L225 Difference]: With dead ends: 105 [2022-11-03 02:22:46,493 INFO L226 Difference]: Without dead ends: 89 [2022-11-03 02:22:46,494 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:22:46,494 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 18 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:46,494 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 66 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:22:46,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-11-03 02:22:46,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 87. [2022-11-03 02:22:46,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 84 states have (on average 1.2142857142857142) internal successors, (102), 86 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:46,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 102 transitions. [2022-11-03 02:22:46,497 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 102 transitions. Word has length 18 [2022-11-03 02:22:46,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:46,498 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 102 transitions. [2022-11-03 02:22:46,498 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:46,498 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 102 transitions. [2022-11-03 02:22:46,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:22:46,498 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:46,499 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:46,499 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29 [2022-11-03 02:22:46,499 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:46,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:46,499 INFO L85 PathProgramCache]: Analyzing trace with hash 1280145876, now seen corresponding path program 2 times [2022-11-03 02:22:46,499 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:46,499 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [246267627] [2022-11-03 02:22:46,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:46,500 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:46,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:46,996 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:46,996 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:46,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [246267627] [2022-11-03 02:22:46,997 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [246267627] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:46,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [108957404] [2022-11-03 02:22:46,997 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:22:46,997 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:46,997 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:47,003 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:47,028 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-03 02:22:47,133 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:22:47,133 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:22:47,135 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-03 02:22:47,138 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:47,150 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:22:47,240 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:47,255 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:22:47,311 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:22:47,350 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:22:47,355 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:47,355 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:47,409 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_485 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_485) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:22:47,437 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_485 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_485) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)))) is different from false [2022-11-03 02:22:47,467 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_485 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_485) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:22:47,475 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:22:47,476 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:22:47,484 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:22:47,485 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:22:47,490 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:22:47,650 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 3 not checked. [2022-11-03 02:22:47,651 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [108957404] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:47,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1603379560] [2022-11-03 02:22:47,653 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:22:47,653 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:47,653 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:47,654 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:47,654 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:47,704 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:47,707 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:47,708 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:47,751 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:47,800 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:47,826 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:47,889 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:47,939 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:47,940 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:48,104 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:48,105 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:22:48,148 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:22:48,148 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:22:48,276 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:48,369 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:48,441 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:51,010 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5094#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:51,010 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:51,010 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:51,010 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 23 [2022-11-03 02:22:51,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371898010] [2022-11-03 02:22:51,010 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:51,011 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:22:51,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:51,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:22:51,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=942, Unknown=3, NotChecked=192, Total=1260 [2022-11-03 02:22:51,012 INFO L87 Difference]: Start difference. First operand 87 states and 102 transitions. Second operand has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:51,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:51,349 INFO L93 Difference]: Finished difference Result 149 states and 173 transitions. [2022-11-03 02:22:51,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-03 02:22:51,349 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-03 02:22:51,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:51,350 INFO L225 Difference]: With dead ends: 149 [2022-11-03 02:22:51,350 INFO L226 Difference]: Without dead ends: 123 [2022-11-03 02:22:51,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 33 SyntacticMatches, 6 SemanticMatches, 37 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 340 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=146, Invalid=1123, Unknown=3, NotChecked=210, Total=1482 [2022-11-03 02:22:51,351 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 34 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 228 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 323 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 86 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:51,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 71 Invalid, 323 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 228 Invalid, 0 Unknown, 86 Unchecked, 0.2s Time] [2022-11-03 02:22:51,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2022-11-03 02:22:51,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 120. [2022-11-03 02:22:51,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 117 states have (on average 1.1965811965811965) internal successors, (140), 119 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:51,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 140 transitions. [2022-11-03 02:22:51,355 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 140 transitions. Word has length 20 [2022-11-03 02:22:51,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:51,356 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 140 transitions. [2022-11-03 02:22:51,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:51,356 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 140 transitions. [2022-11-03 02:22:51,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 02:22:51,356 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:51,357 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:51,405 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:51,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable30 [2022-11-03 02:22:51,557 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:51,557 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:51,558 INFO L85 PathProgramCache]: Analyzing trace with hash -1006164270, now seen corresponding path program 1 times [2022-11-03 02:22:51,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:51,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1782632545] [2022-11-03 02:22:51,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:51,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:51,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:51,838 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:51,839 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:51,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1782632545] [2022-11-03 02:22:51,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1782632545] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:51,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [413290498] [2022-11-03 02:22:51,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:51,839 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:51,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:51,843 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:51,846 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-03 02:22:51,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:51,951 INFO L263 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-03 02:22:51,953 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:51,967 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:22:51,967 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:22:52,099 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 4 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:52,099 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:52,397 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 4 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:22:52,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [413290498] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:52,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [770272462] [2022-11-03 02:22:52,399 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-03 02:22:52,399 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:52,399 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:52,399 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:52,399 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:52,445 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:52,447 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:52,448 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:52,499 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:22:52,547 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:52,573 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:52,642 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:52,694 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:52,738 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:52,779 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:52,827 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:52,827 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:53,121 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:55,383 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5530#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:55,383 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:55,383 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:55,383 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 25 [2022-11-03 02:22:55,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [377568864] [2022-11-03 02:22:55,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:55,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-03 02:22:55,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:55,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-03 02:22:55,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=164, Invalid=1096, Unknown=0, NotChecked=0, Total=1260 [2022-11-03 02:22:55,385 INFO L87 Difference]: Start difference. First operand 120 states and 140 transitions. Second operand has 26 states, 25 states have (on average 2.12) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:56,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:22:56,036 INFO L93 Difference]: Finished difference Result 218 states and 244 transitions. [2022-11-03 02:22:56,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:22:56,037 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 2.12) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-03 02:22:56,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:22:56,038 INFO L225 Difference]: With dead ends: 218 [2022-11-03 02:22:56,038 INFO L226 Difference]: Without dead ends: 218 [2022-11-03 02:22:56,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 522 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=314, Invalid=1666, Unknown=0, NotChecked=0, Total=1980 [2022-11-03 02:22:56,039 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 144 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 617 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 655 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 617 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:22:56,039 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [144 Valid, 205 Invalid, 655 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 617 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:22:56,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-11-03 02:22:56,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 124. [2022-11-03 02:22:56,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 121 states have (on average 1.2066115702479339) internal successors, (146), 123 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:56,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 146 transitions. [2022-11-03 02:22:56,044 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 146 transitions. Word has length 21 [2022-11-03 02:22:56,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:22:56,044 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 146 transitions. [2022-11-03 02:22:56,044 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 2.12) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:22:56,044 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 146 transitions. [2022-11-03 02:22:56,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 02:22:56,045 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:22:56,045 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:22:56,094 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-03 02:22:56,262 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-03 02:22:56,262 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:22:56,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:22:56,263 INFO L85 PathProgramCache]: Analyzing trace with hash -2062061322, now seen corresponding path program 5 times [2022-11-03 02:22:56,263 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:22:56,263 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [209321999] [2022-11-03 02:22:56,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:22:56,263 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:22:56,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:22:56,984 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 1 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:56,985 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:22:56,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [209321999] [2022-11-03 02:22:56,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [209321999] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:22:56,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1653537573] [2022-11-03 02:22:56,985 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:22:56,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:22:56,985 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:22:56,988 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:22:57,012 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-03 02:22:57,121 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:22:57,121 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:22:57,123 INFO L263 TraceCheckSpWp]: Trace formula consists of 179 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-03 02:22:57,125 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:22:57,292 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:57,551 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:22:57,552 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:22:57,588 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:57,588 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:22:57,765 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:22:57,767 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:22:57,937 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:22:57,937 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1653537573] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:22:57,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1380396875] [2022-11-03 02:22:57,942 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:22:57,943 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:22:57,943 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:22:57,943 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:22:57,943 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:22:57,985 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:57,988 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:22:57,988 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:22:58,050 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:58,110 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:58,134 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:58,189 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:22:58,269 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:22:58,269 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:22:58,400 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:22:59,878 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6051#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:22:59,878 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:22:59,878 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:22:59,878 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 31 [2022-11-03 02:22:59,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707381559] [2022-11-03 02:22:59,878 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:22:59,879 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-03 02:22:59,879 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:22:59,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-03 02:22:59,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=1373, Unknown=0, NotChecked=0, Total=1482 [2022-11-03 02:22:59,880 INFO L87 Difference]: Start difference. First operand 124 states and 146 transitions. Second operand has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:03,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:03,171 INFO L93 Difference]: Finished difference Result 256 states and 287 transitions. [2022-11-03 02:23:03,173 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-11-03 02:23:03,173 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-03 02:23:03,173 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:03,174 INFO L225 Difference]: With dead ends: 256 [2022-11-03 02:23:03,174 INFO L226 Difference]: Without dead ends: 246 [2022-11-03 02:23:03,176 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 35 SyntacticMatches, 6 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 1206 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=407, Invalid=4423, Unknown=0, NotChecked=0, Total=4830 [2022-11-03 02:23:03,176 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 155 mSDsluCounter, 384 mSDsCounter, 0 mSdLazyCounter, 1209 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 1245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 1209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 2 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:03,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 376 Invalid, 1245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 1209 Invalid, 0 Unknown, 2 Unchecked, 0.9s Time] [2022-11-03 02:23:03,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 246 states. [2022-11-03 02:23:03,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 246 to 148. [2022-11-03 02:23:03,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2137931034482758) internal successors, (176), 147 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:03,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 176 transitions. [2022-11-03 02:23:03,181 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 176 transitions. Word has length 21 [2022-11-03 02:23:03,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:03,181 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 176 transitions. [2022-11-03 02:23:03,182 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:03,182 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 176 transitions. [2022-11-03 02:23:03,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-03 02:23:03,195 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:03,196 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:03,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:03,417 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:03,417 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:03,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:03,417 INFO L85 PathProgramCache]: Analyzing trace with hash -333846590, now seen corresponding path program 3 times [2022-11-03 02:23:03,417 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:03,418 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769549144] [2022-11-03 02:23:03,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:03,418 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:03,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:03,723 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:03,724 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:03,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769549144] [2022-11-03 02:23:03,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1769549144] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:03,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [897434693] [2022-11-03 02:23:03,724 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:23:03,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:03,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:03,727 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:03,762 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-03 02:23:03,883 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:23:03,883 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:23:03,885 INFO L263 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-03 02:23:03,887 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:04,046 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:04,047 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:04,268 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:23:04,319 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:04,320 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [897434693] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:04,320 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1699821054] [2022-11-03 02:23:04,321 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:23:04,321 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:04,322 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:04,322 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:04,322 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:04,367 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:04,370 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:04,371 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:04,414 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:04,467 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:04,491 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:04,554 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:04,601 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:04,602 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:04,750 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:04,751 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:04,793 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:23:04,793 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:23:04,939 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:05,065 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:05,140 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:07,850 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6679#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:07,851 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:07,851 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:07,851 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-11-03 02:23:07,851 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1504783623] [2022-11-03 02:23:07,854 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:07,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-03 02:23:07,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:07,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-03 02:23:07,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=1120, Unknown=0, NotChecked=0, Total=1260 [2022-11-03 02:23:07,856 INFO L87 Difference]: Start difference. First operand 148 states and 176 transitions. Second operand has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:08,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:08,399 INFO L93 Difference]: Finished difference Result 160 states and 184 transitions. [2022-11-03 02:23:08,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:23:08,400 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-03 02:23:08,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:08,402 INFO L225 Difference]: With dead ends: 160 [2022-11-03 02:23:08,402 INFO L226 Difference]: Without dead ends: 160 [2022-11-03 02:23:08,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 37 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 423 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=282, Invalid=1788, Unknown=0, NotChecked=0, Total=2070 [2022-11-03 02:23:08,404 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 205 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 382 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 410 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 382 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:08,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [205 Valid, 77 Invalid, 410 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 382 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:23:08,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-03 02:23:08,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 153. [2022-11-03 02:23:08,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 150 states have (on average 1.2066666666666668) internal successors, (181), 152 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:08,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 181 transitions. [2022-11-03 02:23:08,416 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 181 transitions. Word has length 22 [2022-11-03 02:23:08,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:08,416 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 181 transitions. [2022-11-03 02:23:08,416 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:08,416 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 181 transitions. [2022-11-03 02:23:08,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:23:08,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:08,417 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:08,457 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:08,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-03 02:23:08,642 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:08,642 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:08,643 INFO L85 PathProgramCache]: Analyzing trace with hash -740843159, now seen corresponding path program 2 times [2022-11-03 02:23:08,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:08,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [315557086] [2022-11-03 02:23:08,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:08,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:08,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:08,985 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:23:08,986 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:08,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [315557086] [2022-11-03 02:23:08,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [315557086] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:08,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1758589435] [2022-11-03 02:23:08,986 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:23:08,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:08,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:08,988 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:09,014 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-03 02:23:09,162 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:23:09,162 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:23:09,165 INFO L263 TraceCheckSpWp]: Trace formula consists of 205 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-03 02:23:09,166 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:09,422 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:23:09,423 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:09,653 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-03 02:23:09,735 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:23:09,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1758589435] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:09,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2132053030] [2022-11-03 02:23:09,737 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-03 02:23:09,737 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:09,737 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:09,737 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:09,738 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:09,784 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:09,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:09,788 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:09,832 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:09,877 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:09,904 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:09,974 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:10,028 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:10,074 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:10,116 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:10,161 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:10,162 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:10,504 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:12,743 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7199#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:12,743 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:12,743 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:12,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 29 [2022-11-03 02:23:12,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126613434] [2022-11-03 02:23:12,743 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:12,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-03 02:23:12,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:12,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-03 02:23:12,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=202, Invalid=1358, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:23:12,745 INFO L87 Difference]: Start difference. First operand 153 states and 181 transitions. Second operand has 30 states, 29 states have (on average 2.0344827586206895) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:13,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:13,394 INFO L93 Difference]: Finished difference Result 329 states and 364 transitions. [2022-11-03 02:23:13,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:23:13,395 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 2.0344827586206895) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-03 02:23:13,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:13,396 INFO L225 Difference]: With dead ends: 329 [2022-11-03 02:23:13,397 INFO L226 Difference]: Without dead ends: 329 [2022-11-03 02:23:13,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 42 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 820 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=394, Invalid=2156, Unknown=0, NotChecked=0, Total=2550 [2022-11-03 02:23:13,398 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 241 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 592 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 654 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 592 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:13,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 237 Invalid, 654 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 592 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:23:13,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-11-03 02:23:13,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 157. [2022-11-03 02:23:13,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.2142857142857142) internal successors, (187), 156 states have internal predecessors, (187), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:13,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 187 transitions. [2022-11-03 02:23:13,404 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 187 transitions. Word has length 25 [2022-11-03 02:23:13,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:13,405 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 187 transitions. [2022-11-03 02:23:13,405 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 2.0344827586206895) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:13,405 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 187 transitions. [2022-11-03 02:23:13,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:23:13,406 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:13,406 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:13,439 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:13,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:13,618 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:13,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:13,619 INFO L85 PathProgramCache]: Analyzing trace with hash -1072925247, now seen corresponding path program 1 times [2022-11-03 02:23:13,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:13,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1136562740] [2022-11-03 02:23:13,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:13,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:13,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:14,163 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:14,163 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:14,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1136562740] [2022-11-03 02:23:14,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1136562740] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:14,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1257712395] [2022-11-03 02:23:14,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:14,164 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:14,164 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:14,167 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:14,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-03 02:23:14,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:14,315 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-03 02:23:14,319 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:14,374 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:23:14,374 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:23:14,821 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:14,821 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:15,406 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:15,406 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1257712395] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:15,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1357741971] [2022-11-03 02:23:15,407 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:23:15,407 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:15,408 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:15,408 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:15,408 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:15,454 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:15,457 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:15,458 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:15,496 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:15,544 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:15,568 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:15,637 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:15,689 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:15,732 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:15,759 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:15,812 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:15,813 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:16,042 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:23:16,043 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:23:16,120 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:16,234 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:16,460 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:20,380 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7898#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:20,380 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:20,380 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:20,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 35 [2022-11-03 02:23:20,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [111787376] [2022-11-03 02:23:20,381 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:20,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-03 02:23:20,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:20,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-03 02:23:20,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=2312, Unknown=0, NotChecked=0, Total=2550 [2022-11-03 02:23:20,383 INFO L87 Difference]: Start difference. First operand 157 states and 187 transitions. Second operand has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:24,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:24,037 INFO L93 Difference]: Finished difference Result 255 states and 282 transitions. [2022-11-03 02:23:24,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-03 02:23:24,038 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-03 02:23:24,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:24,038 INFO L225 Difference]: With dead ends: 255 [2022-11-03 02:23:24,038 INFO L226 Difference]: Without dead ends: 223 [2022-11-03 02:23:24,039 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 35 SyntacticMatches, 1 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1626 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=989, Invalid=6151, Unknown=0, NotChecked=0, Total=7140 [2022-11-03 02:23:24,040 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 608 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 840 mSolverCounterSat, 176 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 608 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 1016 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 176 IncrementalHoareTripleChecker+Valid, 840 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:24,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [608 Valid, 142 Invalid, 1016 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [176 Valid, 840 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-03 02:23:24,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-11-03 02:23:24,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 165. [2022-11-03 02:23:24,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 162 states have (on average 1.1790123456790123) internal successors, (191), 164 states have internal predecessors, (191), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:24,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 191 transitions. [2022-11-03 02:23:24,047 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 191 transitions. Word has length 25 [2022-11-03 02:23:24,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:24,047 INFO L495 AbstractCegarLoop]: Abstraction has 165 states and 191 transitions. [2022-11-03 02:23:24,047 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:24,048 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 191 transitions. [2022-11-03 02:23:24,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:23:24,048 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:24,048 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:24,080 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:24,258 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-03 02:23:24,258 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:24,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:24,259 INFO L85 PathProgramCache]: Analyzing trace with hash 1180949197, now seen corresponding path program 6 times [2022-11-03 02:23:24,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:24,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1163376320] [2022-11-03 02:23:24,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:24,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:24,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:24,865 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:24,865 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:24,866 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1163376320] [2022-11-03 02:23:24,866 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1163376320] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:24,866 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [959934781] [2022-11-03 02:23:24,866 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:23:24,866 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:24,866 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:24,868 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:24,869 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-03 02:23:25,021 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:23:25,021 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:23:25,023 INFO L263 TraceCheckSpWp]: Trace formula consists of 203 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-03 02:23:25,025 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:25,210 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:25,537 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:23:25,537 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:23:25,576 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:25,576 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:25,785 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:23:25,789 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:23:25,945 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:25,946 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [959934781] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:25,946 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [182113491] [2022-11-03 02:23:25,947 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:23:25,947 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:25,947 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:25,948 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:25,948 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:25,986 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:25,989 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:25,990 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:26,046 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:26,102 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:26,154 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:26,222 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:26,284 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:26,285 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:26,431 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:28,145 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8580#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:28,145 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:28,145 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:28,145 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 36 [2022-11-03 02:23:28,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [185265713] [2022-11-03 02:23:28,146 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:28,146 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-03 02:23:28,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:28,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-03 02:23:28,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1768, Unknown=0, NotChecked=0, Total=1892 [2022-11-03 02:23:28,148 INFO L87 Difference]: Start difference. First operand 165 states and 191 transitions. Second operand has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:30,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:30,779 INFO L93 Difference]: Finished difference Result 394 states and 436 transitions. [2022-11-03 02:23:30,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-03 02:23:30,779 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-03 02:23:30,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:30,781 INFO L225 Difference]: With dead ends: 394 [2022-11-03 02:23:30,781 INFO L226 Difference]: Without dead ends: 382 [2022-11-03 02:23:30,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 44 SyntacticMatches, 2 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 858 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=352, Invalid=4070, Unknown=0, NotChecked=0, Total=4422 [2022-11-03 02:23:30,784 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 299 mSDsluCounter, 437 mSDsCounter, 0 mSdLazyCounter, 1560 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 299 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 1778 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 1560 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 182 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:30,784 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [299 Valid, 419 Invalid, 1778 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 1560 Invalid, 0 Unknown, 182 Unchecked, 1.0s Time] [2022-11-03 02:23:30,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2022-11-03 02:23:30,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 201. [2022-11-03 02:23:30,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 198 states have (on average 1.1868686868686869) internal successors, (235), 200 states have internal predecessors, (235), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:30,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 235 transitions. [2022-11-03 02:23:30,792 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 235 transitions. Word has length 25 [2022-11-03 02:23:30,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:30,792 INFO L495 AbstractCegarLoop]: Abstraction has 201 states and 235 transitions. [2022-11-03 02:23:30,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:30,793 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 235 transitions. [2022-11-03 02:23:30,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-03 02:23:30,793 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:30,794 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:30,839 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:31,022 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable36,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:31,022 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:31,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:31,023 INFO L85 PathProgramCache]: Analyzing trace with hash -108339126, now seen corresponding path program 4 times [2022-11-03 02:23:31,023 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:31,023 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36137405] [2022-11-03 02:23:31,023 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:31,023 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:31,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:31,742 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:31,742 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:31,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36137405] [2022-11-03 02:23:31,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36137405] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:31,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [975060814] [2022-11-03 02:23:31,743 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:23:31,743 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:31,744 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:31,745 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:31,746 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-03 02:23:31,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:31,891 INFO L263 TraceCheckSpWp]: Trace formula consists of 239 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-03 02:23:31,897 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:31,904 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:23:32,063 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:32,129 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:23:32,292 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:23:32,346 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:23:32,360 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:23:32,365 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:32,366 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:32,380 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:23:32,389 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:23:32,400 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int)) (v_ArrVal_741 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_741) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:23:32,411 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:23:32,426 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_742) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:23:32,432 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:23:32,433 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:23:32,443 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:23:32,443 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:23:32,621 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 11 not checked. [2022-11-03 02:23:32,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [975060814] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:32,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [589560601] [2022-11-03 02:23:32,623 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:23:32,623 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:32,623 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:32,623 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:32,623 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:32,669 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:32,672 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:32,675 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:32,727 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:32,788 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:32,816 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:32,916 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:32,976 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:32,977 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:33,150 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:33,153 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:33,191 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:23:33,192 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:23:33,294 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:33,391 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:33,484 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:36,341 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9412#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:36,341 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:36,342 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:36,342 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 15, 15] total 32 [2022-11-03 02:23:36,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1420427412] [2022-11-03 02:23:36,342 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:36,342 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-03 02:23:36,342 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:36,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-03 02:23:36,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=147, Invalid=1428, Unknown=5, NotChecked=400, Total=1980 [2022-11-03 02:23:36,344 INFO L87 Difference]: Start difference. First operand 201 states and 235 transitions. Second operand has 32 states, 32 states have (on average 1.75) internal successors, (56), 32 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:36,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:36,940 INFO L93 Difference]: Finished difference Result 275 states and 318 transitions. [2022-11-03 02:23:36,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:23:36,940 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.75) internal successors, (56), 32 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-03 02:23:36,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:36,942 INFO L225 Difference]: With dead ends: 275 [2022-11-03 02:23:36,942 INFO L226 Difference]: Without dead ends: 235 [2022-11-03 02:23:36,943 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 47 SyntacticMatches, 7 SemanticMatches, 49 ConstructedPredicates, 5 IntricatePredicates, 0 DeprecatedPredicates, 496 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=191, Invalid=1894, Unknown=5, NotChecked=460, Total=2550 [2022-11-03 02:23:36,943 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 32 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 626 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 253 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:36,944 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 154 Invalid, 626 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 362 Invalid, 0 Unknown, 253 Unchecked, 0.2s Time] [2022-11-03 02:23:36,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-11-03 02:23:36,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 234. [2022-11-03 02:23:36,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 231 states have (on average 1.1861471861471862) internal successors, (274), 233 states have internal predecessors, (274), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:36,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 274 transitions. [2022-11-03 02:23:36,950 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 274 transitions. Word has length 26 [2022-11-03 02:23:36,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:36,951 INFO L495 AbstractCegarLoop]: Abstraction has 234 states and 274 transitions. [2022-11-03 02:23:36,951 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.75) internal successors, (56), 32 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:36,951 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 274 transitions. [2022-11-03 02:23:36,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:23:36,952 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:36,952 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:36,994 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:37,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-03 02:23:37,178 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:37,179 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:37,179 INFO L85 PathProgramCache]: Analyzing trace with hash -979590216, now seen corresponding path program 5 times [2022-11-03 02:23:37,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:37,179 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2035754612] [2022-11-03 02:23:37,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:37,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:37,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:37,604 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:37,604 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:37,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2035754612] [2022-11-03 02:23:37,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2035754612] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:37,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [994246434] [2022-11-03 02:23:37,605 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:23:37,605 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:37,606 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:37,607 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:37,620 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-03 02:23:37,862 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-03 02:23:37,862 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:23:37,864 INFO L263 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 38 conjunts are in the unsatisfiable core [2022-11-03 02:23:37,866 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:38,166 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:38,166 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:38,443 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-03 02:23:38,534 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:38,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [994246434] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:38,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [806091420] [2022-11-03 02:23:38,536 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:23:38,536 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:38,537 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:38,537 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:38,537 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:38,581 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:38,583 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:38,584 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:38,642 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:38,694 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:38,724 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:38,792 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:38,846 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:38,847 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:38,968 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:38,969 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:39,003 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:23:39,004 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:23:39,145 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:39,345 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:39,462 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:43,173 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10143#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:43,173 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:43,173 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:43,173 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 30 [2022-11-03 02:23:43,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1678741150] [2022-11-03 02:23:43,174 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:43,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-03 02:23:43,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:43,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-03 02:23:43,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1695, Unknown=0, NotChecked=0, Total=1892 [2022-11-03 02:23:43,177 INFO L87 Difference]: Start difference. First operand 234 states and 274 transitions. Second operand has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:44,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:44,144 INFO L93 Difference]: Finished difference Result 330 states and 378 transitions. [2022-11-03 02:23:44,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:23:44,145 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-03 02:23:44,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:44,146 INFO L225 Difference]: With dead ends: 330 [2022-11-03 02:23:44,147 INFO L226 Difference]: Without dead ends: 330 [2022-11-03 02:23:44,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 107 GetRequests, 48 SyntacticMatches, 4 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 802 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=435, Invalid=2757, Unknown=0, NotChecked=0, Total=3192 [2022-11-03 02:23:44,148 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 216 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 692 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 718 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 692 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:44,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [216 Valid, 159 Invalid, 718 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 692 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-03 02:23:44,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2022-11-03 02:23:44,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 272. [2022-11-03 02:23:44,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 272 states, 269 states have (on average 1.204460966542751) internal successors, (324), 271 states have internal predecessors, (324), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:44,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272 states to 272 states and 324 transitions. [2022-11-03 02:23:44,157 INFO L78 Accepts]: Start accepts. Automaton has 272 states and 324 transitions. Word has length 28 [2022-11-03 02:23:44,157 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:44,157 INFO L495 AbstractCegarLoop]: Abstraction has 272 states and 324 transitions. [2022-11-03 02:23:44,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:44,158 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 324 transitions. [2022-11-03 02:23:44,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-03 02:23:44,159 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:44,159 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:44,198 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:44,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-03 02:23:44,378 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:44,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:44,379 INFO L85 PathProgramCache]: Analyzing trace with hash -302525593, now seen corresponding path program 2 times [2022-11-03 02:23:44,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:44,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [644128104] [2022-11-03 02:23:44,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:44,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:44,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:45,194 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:45,194 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:45,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [644128104] [2022-11-03 02:23:45,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [644128104] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:45,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1722727081] [2022-11-03 02:23:45,195 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:23:45,195 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:45,195 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:45,199 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:45,231 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-03 02:23:45,561 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-03 02:23:45,562 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:23:45,565 INFO L263 TraceCheckSpWp]: Trace formula consists of 258 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-03 02:23:45,567 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:45,643 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:23:45,643 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:23:46,214 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 3 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:46,214 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:46,914 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 9 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:46,914 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1722727081] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:46,914 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [165971273] [2022-11-03 02:23:46,916 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:23:46,917 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:46,917 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:46,917 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:46,918 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:46,978 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:46,981 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:46,982 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:47,031 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:47,093 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:47,118 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:47,174 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:47,221 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:47,221 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:47,333 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:47,334 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:23:47,369 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:23:47,369 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:23:47,480 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:47,620 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:23:47,718 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:23:51,156 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10989#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:23:51,156 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:23:51,156 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:23:51,156 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 11] total 35 [2022-11-03 02:23:51,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1447198623] [2022-11-03 02:23:51,157 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:23:51,157 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-03 02:23:51,157 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:23:51,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-03 02:23:51,158 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=2211, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 02:23:51,158 INFO L87 Difference]: Start difference. First operand 272 states and 324 transitions. Second operand has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:55,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:23:55,105 INFO L93 Difference]: Finished difference Result 392 states and 443 transitions. [2022-11-03 02:23:55,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-03 02:23:55,106 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-03 02:23:55,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:23:55,108 INFO L225 Difference]: With dead ends: 392 [2022-11-03 02:23:55,108 INFO L226 Difference]: Without dead ends: 392 [2022-11-03 02:23:55,109 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 48 SyntacticMatches, 1 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1398 ImplicationChecksByTransitivity, 7.7s TimeCoverageRelationStatistics Valid=987, Invalid=5655, Unknown=0, NotChecked=0, Total=6642 [2022-11-03 02:23:55,110 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 533 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 1090 mSolverCounterSat, 153 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 533 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 1243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 153 IncrementalHoareTripleChecker+Valid, 1090 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:23:55,110 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [533 Valid, 101 Invalid, 1243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [153 Valid, 1090 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-03 02:23:55,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 392 states. [2022-11-03 02:23:55,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 392 to 278. [2022-11-03 02:23:55,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 275 states have (on average 1.2036363636363636) internal successors, (331), 277 states have internal predecessors, (331), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:55,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 331 transitions. [2022-11-03 02:23:55,118 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 331 transitions. Word has length 29 [2022-11-03 02:23:55,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:23:55,118 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 331 transitions. [2022-11-03 02:23:55,118 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:23:55,118 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 331 transitions. [2022-11-03 02:23:55,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-03 02:23:55,119 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:23:55,119 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:23:55,150 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-03 02:23:55,334 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-03 02:23:55,334 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:23:55,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:23:55,335 INFO L85 PathProgramCache]: Analyzing trace with hash -1560554908, now seen corresponding path program 7 times [2022-11-03 02:23:55,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:23:55,335 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1382887196] [2022-11-03 02:23:55,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:23:55,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:23:55,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:56,251 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 9 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:56,251 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:23:56,251 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1382887196] [2022-11-03 02:23:56,251 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1382887196] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:23:56,251 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [594783851] [2022-11-03 02:23:56,251 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:23:56,251 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:23:56,251 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:23:56,252 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:23:56,253 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-03 02:23:56,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:23:56,378 INFO L263 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-03 02:23:56,380 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:23:56,391 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:23:56,391 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:23:56,534 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:57,081 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:23:57,082 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-11-03 02:23:57,160 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 16 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:57,160 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:23:57,684 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:23:57,695 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-03 02:23:58,056 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 16 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:23:58,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [594783851] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:23:58,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1958407157] [2022-11-03 02:23:58,058 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:23:58,058 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:23:58,058 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:23:58,059 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:23:58,059 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:23:58,101 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:58,104 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:23:58,105 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:23:58,155 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:58,199 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:58,225 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:58,281 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:23:58,345 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:23:58,345 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:23:58,440 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:24:00,167 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11951#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:24:00,167 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:24:00,167 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:24:00,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 46 [2022-11-03 02:24:00,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [292578009] [2022-11-03 02:24:00,168 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:24:00,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-03 02:24:00,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:24:00,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-03 02:24:00,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=252, Invalid=2718, Unknown=0, NotChecked=0, Total=2970 [2022-11-03 02:24:00,169 INFO L87 Difference]: Start difference. First operand 278 states and 331 transitions. Second operand has 47 states, 46 states have (on average 1.826086956521739) internal successors, (84), 47 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:03,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:24:03,580 INFO L93 Difference]: Finished difference Result 499 states and 563 transitions. [2022-11-03 02:24:03,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-03 02:24:03,581 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 46 states have (on average 1.826086956521739) internal successors, (84), 47 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-03 02:24:03,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:24:03,583 INFO L225 Difference]: With dead ends: 499 [2022-11-03 02:24:03,583 INFO L226 Difference]: Without dead ends: 499 [2022-11-03 02:24:03,584 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 61 SyntacticMatches, 1 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1355 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=1103, Invalid=7087, Unknown=0, NotChecked=0, Total=8190 [2022-11-03 02:24:03,584 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 189 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 1118 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 1440 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 1118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 287 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:24:03,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 296 Invalid, 1440 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 1118 Invalid, 0 Unknown, 287 Unchecked, 0.9s Time] [2022-11-03 02:24:03,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2022-11-03 02:24:03,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 286. [2022-11-03 02:24:03,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 286 states, 283 states have (on average 1.2084805653710247) internal successors, (342), 285 states have internal predecessors, (342), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:03,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 342 transitions. [2022-11-03 02:24:03,594 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 342 transitions. Word has length 29 [2022-11-03 02:24:03,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:24:03,594 INFO L495 AbstractCegarLoop]: Abstraction has 286 states and 342 transitions. [2022-11-03 02:24:03,594 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 46 states have (on average 1.826086956521739) internal successors, (84), 47 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:03,595 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 342 transitions. [2022-11-03 02:24:03,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-03 02:24:03,595 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:24:03,596 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:24:03,635 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-03 02:24:03,810 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:03,810 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:24:03,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:24:03,811 INFO L85 PathProgramCache]: Analyzing trace with hash -353886445, now seen corresponding path program 1 times [2022-11-03 02:24:03,811 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:24:03,811 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [912863962] [2022-11-03 02:24:03,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:03,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:24:03,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:04,425 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:24:04,425 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:24:04,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [912863962] [2022-11-03 02:24:04,425 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [912863962] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:24:04,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [822586445] [2022-11-03 02:24:04,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:04,426 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:04,426 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:24:04,427 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:24:04,428 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-03 02:24:04,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:04,561 INFO L263 TraceCheckSpWp]: Trace formula consists of 263 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-03 02:24:04,563 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:24:04,570 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:24:04,688 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:04,716 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:24:04,819 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:24:04,889 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:24:04,955 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:24:04,959 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:24:04,959 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:24:04,972 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_919 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_919) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:24:04,981 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_919 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_919) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:24:04,990 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_919 (Array Int Int)) (v_ArrVal_918 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_918) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_919) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:24:05,136 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:24:05,136 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:24:05,144 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:24:05,144 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:24:05,156 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:24:05,393 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 6 proven. 7 refuted. 0 times theorem prover too weak. 3 trivial. 9 not checked. [2022-11-03 02:24:05,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [822586445] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:24:05,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [27386441] [2022-11-03 02:24:05,394 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:24:05,395 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:24:05,395 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:24:05,395 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:24:05,395 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:24:05,436 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:05,438 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:05,439 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:24:05,479 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:05,527 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:05,552 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:05,623 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:05,666 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:05,689 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:05,732 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:24:05,733 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:24:05,927 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:24:05,928 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:24:05,996 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:06,100 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:06,414 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:24:10,860 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13040#(and (or (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post4#1.base|) |ULTIMATE.start_cstrcat_#t~post4#1.offset|) 0) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrcat_#t~post5#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|)) (= |#NULL.base| 0)) (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 1 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (exists ((|v_ULTIMATE.start_cstrcat_#t~post4#1.base_106| Int) (|v_ULTIMATE.start_cstrcat_#t~post4#1.offset_105| Int)) (and (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_106|) |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_105|) 0)) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.base_106|) (= (select |#valid| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_106|) 1) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_105|) (<= (+ |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_105| 1) (select |#length| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_106|)))) (<= 1 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|))) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|))' at error location [2022-11-03 02:24:10,860 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:24:10,860 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:24:10,861 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 16, 16] total 36 [2022-11-03 02:24:10,861 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1414903339] [2022-11-03 02:24:10,861 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:24:10,861 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-03 02:24:10,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:24:10,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-03 02:24:10,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=2001, Unknown=3, NotChecked=276, Total=2450 [2022-11-03 02:24:10,863 INFO L87 Difference]: Start difference. First operand 286 states and 342 transitions. Second operand has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:11,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:24:11,900 INFO L93 Difference]: Finished difference Result 335 states and 385 transitions. [2022-11-03 02:24:11,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:24:11,900 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-03 02:24:11,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:24:11,902 INFO L225 Difference]: With dead ends: 335 [2022-11-03 02:24:11,902 INFO L226 Difference]: Without dead ends: 299 [2022-11-03 02:24:11,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 57 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 867 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=269, Invalid=2820, Unknown=3, NotChecked=330, Total=3422 [2022-11-03 02:24:11,903 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 103 mSDsluCounter, 400 mSDsCounter, 0 mSdLazyCounter, 737 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 1092 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 737 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 324 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:24:11,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 306 Invalid, 1092 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 737 Invalid, 0 Unknown, 324 Unchecked, 0.5s Time] [2022-11-03 02:24:11,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-11-03 02:24:11,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 285. [2022-11-03 02:24:11,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 282 states have (on average 1.1808510638297873) internal successors, (333), 284 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:11,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 333 transitions. [2022-11-03 02:24:11,909 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 333 transitions. Word has length 30 [2022-11-03 02:24:11,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:24:11,909 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 333 transitions. [2022-11-03 02:24:11,909 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:11,910 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 333 transitions. [2022-11-03 02:24:11,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:24:11,910 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:24:11,911 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:24:11,954 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-03 02:24:12,134 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable41 [2022-11-03 02:24:12,134 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:24:12,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:24:12,135 INFO L85 PathProgramCache]: Analyzing trace with hash -749678630, now seen corresponding path program 8 times [2022-11-03 02:24:12,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:24:12,135 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1429323017] [2022-11-03 02:24:12,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:12,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:24:12,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:12,595 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:24:12,595 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:24:12,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1429323017] [2022-11-03 02:24:12,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1429323017] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:24:12,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1617237987] [2022-11-03 02:24:12,596 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:24:12,596 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:12,596 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:24:12,597 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:24:12,598 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-03 02:24:12,815 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-03 02:24:12,815 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:24:12,818 INFO L263 TraceCheckSpWp]: Trace formula consists of 238 conjuncts, 50 conjunts are in the unsatisfiable core [2022-11-03 02:24:12,819 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:24:12,977 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:13,078 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:24:13,081 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:24:13,081 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:24:13,141 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:24:13,143 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:24:13,291 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 18 proven. 55 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:24:13,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1617237987] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:24:13,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [429241636] [2022-11-03 02:24:13,292 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:24:13,293 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:24:13,293 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:24:13,293 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:24:13,293 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:24:13,337 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:13,340 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:13,341 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:24:13,399 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:13,457 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:13,504 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:13,605 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:13,665 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:24:13,665 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:24:13,784 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:24:15,282 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13905#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:24:15,282 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:24:15,282 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:24:15,282 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 17, 17] total 30 [2022-11-03 02:24:15,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [466301752] [2022-11-03 02:24:15,282 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:24:15,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-03 02:24:15,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:24:15,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-03 02:24:15,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=1285, Unknown=0, NotChecked=0, Total=1406 [2022-11-03 02:24:15,284 INFO L87 Difference]: Start difference. First operand 285 states and 333 transitions. Second operand has 30 states, 30 states have (on average 1.8) internal successors, (54), 30 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:16,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:24:16,400 INFO L93 Difference]: Finished difference Result 733 states and 805 transitions. [2022-11-03 02:24:16,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-03 02:24:16,402 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.8) internal successors, (54), 30 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-03 02:24:16,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:24:16,405 INFO L225 Difference]: With dead ends: 733 [2022-11-03 02:24:16,405 INFO L226 Difference]: Without dead ends: 719 [2022-11-03 02:24:16,406 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 70 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 581 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=266, Invalid=2386, Unknown=0, NotChecked=0, Total=2652 [2022-11-03 02:24:16,406 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 224 mSDsluCounter, 867 mSDsCounter, 0 mSdLazyCounter, 1165 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 852 SdHoareTripleChecker+Invalid, 1222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 1165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:24:16,407 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 852 Invalid, 1222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 1165 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-03 02:24:16,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 719 states. [2022-11-03 02:24:16,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 719 to 329. [2022-11-03 02:24:16,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 326 states have (on average 1.1901840490797546) internal successors, (388), 328 states have internal predecessors, (388), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:16,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 388 transitions. [2022-11-03 02:24:16,417 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 388 transitions. Word has length 31 [2022-11-03 02:24:16,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:24:16,417 INFO L495 AbstractCegarLoop]: Abstraction has 329 states and 388 transitions. [2022-11-03 02:24:16,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.8) internal successors, (54), 30 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:16,417 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 388 transitions. [2022-11-03 02:24:16,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-03 02:24:16,418 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:24:16,419 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:24:16,458 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-03 02:24:16,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-03 02:24:16,642 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:24:16,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:24:16,643 INFO L85 PathProgramCache]: Analyzing trace with hash -1698516672, now seen corresponding path program 6 times [2022-11-03 02:24:16,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:24:16,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248404845] [2022-11-03 02:24:16,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:16,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:24:16,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:17,437 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:17,437 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:24:17,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [248404845] [2022-11-03 02:24:17,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [248404845] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:24:17,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [134847443] [2022-11-03 02:24:17,438 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:24:17,438 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:17,438 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:24:17,445 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:24:17,447 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-03 02:24:17,655 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:24:17,656 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:24:17,660 INFO L263 TraceCheckSpWp]: Trace formula consists of 283 conjuncts, 93 conjunts are in the unsatisfiable core [2022-11-03 02:24:17,663 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:24:17,931 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:18,014 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:24:18,015 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-03 02:24:18,024 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:24:18,468 INFO L356 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-03 02:24:18,468 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 43 treesize of output 53 [2022-11-03 02:24:18,494 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:24:18,494 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2022-11-03 02:24:18,816 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-03 02:24:19,013 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-11-03 02:24:19,206 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:19,207 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:24:19,209 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:24:19,209 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-03 02:24:19,214 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:19,214 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:24:19,226 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1011 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:24:19,234 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1011 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:24:19,242 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1011 (Array Int Int)) (v_ArrVal_1010 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1010) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:24:19,251 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1011 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:24:19,257 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1011 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) (= |c_ULTIMATE.start_cstrcat_#t~mem6#1| 0)) is different from false [2022-11-03 02:24:19,264 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1009 (Array Int Int)) (v_ArrVal_1011 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1009) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) (= |c_ULTIMATE.start_cstrcat_#t~mem6#1| 0)) is different from false [2022-11-03 02:24:19,280 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1009 (Array Int Int)) (v_ArrVal_1011 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1009) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post5#1.base|) |c_ULTIMATE.start_cstrcat_#t~post5#1.offset|) 0)) is different from false [2022-11-03 02:24:19,290 WARN L833 $PredicateComparison]: unable to prove that (or (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0) (forall ((v_ArrVal_1011 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1011) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0))) is different from false [2022-11-03 02:24:19,532 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:24:19,533 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-11-03 02:24:19,544 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:24:19,545 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-11-03 02:24:19,551 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:24:19,551 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-11-03 02:24:19,559 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:24:20,132 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 23 not checked. [2022-11-03 02:24:20,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [134847443] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:24:20,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1713088882] [2022-11-03 02:24:20,134 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:24:20,134 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:24:20,135 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:24:20,135 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:24:20,135 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:24:20,177 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:20,180 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:20,181 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:24:20,226 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:20,264 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:20,300 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:20,350 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:20,416 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:24:20,416 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:24:20,519 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:24:20,520 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:24:20,560 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:24:20,560 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:24:20,662 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:20,763 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:20,833 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:24:24,739 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15246#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:24:24,740 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:24:24,740 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:24:24,740 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 22, 22] total 57 [2022-11-03 02:24:24,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [637246153] [2022-11-03 02:24:24,740 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:24:24,741 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-03 02:24:24,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:24:24,741 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-03 02:24:24,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=231, Invalid=3546, Unknown=37, NotChecked=1016, Total=4830 [2022-11-03 02:24:24,742 INFO L87 Difference]: Start difference. First operand 329 states and 388 transitions. Second operand has 57 states, 57 states have (on average 1.456140350877193) internal successors, (83), 57 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:26,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:24:26,687 INFO L93 Difference]: Finished difference Result 389 states and 461 transitions. [2022-11-03 02:24:26,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-03 02:24:26,690 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 1.456140350877193) internal successors, (83), 57 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-03 02:24:26,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:24:26,692 INFO L225 Difference]: With dead ends: 389 [2022-11-03 02:24:26,693 INFO L226 Difference]: Without dead ends: 369 [2022-11-03 02:24:26,694 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 47 SyntacticMatches, 3 SemanticMatches, 86 ConstructedPredicates, 8 IntricatePredicates, 1 DeprecatedPredicates, 1342 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=364, Invalid=5942, Unknown=46, NotChecked=1304, Total=7656 [2022-11-03 02:24:26,694 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 58 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 497 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 243 SdHoareTripleChecker+Invalid, 1171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 497 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 664 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:24:26,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 243 Invalid, 1171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 497 Invalid, 0 Unknown, 664 Unchecked, 0.4s Time] [2022-11-03 02:24:26,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 369 states. [2022-11-03 02:24:26,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 369 to 368. [2022-11-03 02:24:26,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 365 states have (on average 1.189041095890411) internal successors, (434), 367 states have internal predecessors, (434), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:26,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 434 transitions. [2022-11-03 02:24:26,702 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 434 transitions. Word has length 32 [2022-11-03 02:24:26,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:24:26,703 INFO L495 AbstractCegarLoop]: Abstraction has 368 states and 434 transitions. [2022-11-03 02:24:26,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 1.456140350877193) internal successors, (83), 57 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:26,703 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 434 transitions. [2022-11-03 02:24:26,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-03 02:24:26,704 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:24:26,704 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:24:26,735 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-03 02:24:26,919 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:26,920 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:24:26,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:24:26,920 INFO L85 PathProgramCache]: Analyzing trace with hash 715222831, now seen corresponding path program 2 times [2022-11-03 02:24:26,920 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:24:26,920 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1667418368] [2022-11-03 02:24:26,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:26,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:24:26,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:27,690 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:27,690 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:24:27,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1667418368] [2022-11-03 02:24:27,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1667418368] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:24:27,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1636923341] [2022-11-03 02:24:27,690 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:24:27,691 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:27,691 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:24:27,692 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:24:27,693 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-03 02:24:27,911 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:24:27,911 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:24:27,914 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-03 02:24:27,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:24:27,988 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:24:27,988 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:24:28,813 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:28,813 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:24:29,804 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:29,805 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1636923341] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:24:29,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [755008084] [2022-11-03 02:24:29,806 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:24:29,806 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:24:29,807 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:24:29,807 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:24:29,807 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:24:29,863 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:29,867 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:29,868 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:24:29,919 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:29,981 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:30,008 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:30,108 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:30,147 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:30,175 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:30,236 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:24:30,237 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:24:30,447 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:24:30,447 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:24:30,515 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:30,620 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:24:30,831 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:24:35,537 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16298#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:24:35,538 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:24:35,538 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:24:35,538 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 16] total 49 [2022-11-03 02:24:35,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1662099914] [2022-11-03 02:24:35,538 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:24:35,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-03 02:24:35,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:24:35,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-03 02:24:35,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=359, Invalid=3801, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:24:35,539 INFO L87 Difference]: Start difference. First operand 368 states and 434 transitions. Second operand has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:45,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:24:45,329 INFO L93 Difference]: Finished difference Result 643 states and 707 transitions. [2022-11-03 02:24:45,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 68 states. [2022-11-03 02:24:45,329 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-03 02:24:45,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:24:45,331 INFO L225 Difference]: With dead ends: 643 [2022-11-03 02:24:45,332 INFO L226 Difference]: Without dead ends: 559 [2022-11-03 02:24:45,333 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3985 ImplicationChecksByTransitivity, 14.8s TimeCoverageRelationStatistics Valid=2568, Invalid=14202, Unknown=0, NotChecked=0, Total=16770 [2022-11-03 02:24:45,334 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 922 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 1682 mSolverCounterSat, 270 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 922 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 1952 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 270 IncrementalHoareTripleChecker+Valid, 1682 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:24:45,334 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [922 Valid, 315 Invalid, 1952 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [270 Valid, 1682 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-03 02:24:45,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 559 states. [2022-11-03 02:24:45,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 559 to 348. [2022-11-03 02:24:45,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 345 states have (on average 1.1565217391304348) internal successors, (399), 347 states have internal predecessors, (399), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:45,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 399 transitions. [2022-11-03 02:24:45,365 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 399 transitions. Word has length 33 [2022-11-03 02:24:45,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:24:45,365 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 399 transitions. [2022-11-03 02:24:45,366 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:45,366 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 399 transitions. [2022-11-03 02:24:45,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-03 02:24:45,367 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:24:45,367 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:24:45,411 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-03 02:24:45,567 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:45,568 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:24:45,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:24:45,568 INFO L85 PathProgramCache]: Analyzing trace with hash -1617745989, now seen corresponding path program 9 times [2022-11-03 02:24:45,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:24:45,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1203701738] [2022-11-03 02:24:45,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:45,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:24:45,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:46,729 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 16 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:46,730 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:24:46,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1203701738] [2022-11-03 02:24:46,730 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1203701738] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:24:46,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [862288639] [2022-11-03 02:24:46,730 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:24:46,730 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:46,730 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:24:46,734 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:24:46,735 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-03 02:24:46,912 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:24:46,912 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:24:46,915 INFO L263 TraceCheckSpWp]: Trace formula consists of 251 conjuncts, 68 conjunts are in the unsatisfiable core [2022-11-03 02:24:46,916 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:24:47,258 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:48,651 INFO L356 Elim1Store]: treesize reduction 29, result has 49.1 percent of original size [2022-11-03 02:24:48,651 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 78 treesize of output 58 [2022-11-03 02:24:48,656 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-03 02:24:48,709 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:48,709 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:24:50,048 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 90 [2022-11-03 02:24:50,061 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 78 [2022-11-03 02:24:50,212 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-03 02:24:50,990 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 49 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:50,990 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [862288639] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:24:50,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [552302114] [2022-11-03 02:24:50,991 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:24:50,992 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:24:50,992 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:24:50,992 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:24:50,992 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:24:51,030 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:51,033 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:24:51,034 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:24:51,084 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:51,136 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:51,166 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:51,248 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:24:51,300 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:24:51,300 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:24:51,428 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:24:53,651 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17689#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:24:53,652 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:24:53,652 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:24:53,652 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 25, 25] total 64 [2022-11-03 02:24:53,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916066036] [2022-11-03 02:24:53,652 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:24:53,652 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-03 02:24:53,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:24:53,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-03 02:24:53,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=373, Invalid=4739, Unknown=0, NotChecked=0, Total=5112 [2022-11-03 02:24:53,654 INFO L87 Difference]: Start difference. First operand 348 states and 399 transitions. Second operand has 64 states, 64 states have (on average 1.484375) internal successors, (95), 64 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:59,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:24:59,078 INFO L93 Difference]: Finished difference Result 447 states and 514 transitions. [2022-11-03 02:24:59,078 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2022-11-03 02:24:59,078 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 64 states have (on average 1.484375) internal successors, (95), 64 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-03 02:24:59,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:24:59,080 INFO L225 Difference]: With dead ends: 447 [2022-11-03 02:24:59,080 INFO L226 Difference]: Without dead ends: 431 [2022-11-03 02:24:59,082 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 44 SyntacticMatches, 1 SemanticMatches, 120 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3768 ImplicationChecksByTransitivity, 10.7s TimeCoverageRelationStatistics Valid=1289, Invalid=13473, Unknown=0, NotChecked=0, Total=14762 [2022-11-03 02:24:59,082 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 188 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 599 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 779 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 599 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 125 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:24:59,082 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 109 Invalid, 779 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 599 Invalid, 0 Unknown, 125 Unchecked, 0.6s Time] [2022-11-03 02:24:59,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 431 states. [2022-11-03 02:24:59,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 431 to 412. [2022-11-03 02:24:59,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 412 states, 409 states have (on average 1.158924205378973) internal successors, (474), 411 states have internal predecessors, (474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:59,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 474 transitions. [2022-11-03 02:24:59,091 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 474 transitions. Word has length 33 [2022-11-03 02:24:59,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:24:59,091 INFO L495 AbstractCegarLoop]: Abstraction has 412 states and 474 transitions. [2022-11-03 02:24:59,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 64 states have (on average 1.484375) internal successors, (95), 64 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:24:59,092 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 474 transitions. [2022-11-03 02:24:59,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-03 02:24:59,093 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:24:59,093 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:24:59,134 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-03 02:24:59,306 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:59,306 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:24:59,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:24:59,307 INFO L85 PathProgramCache]: Analyzing trace with hash 1881385518, now seen corresponding path program 7 times [2022-11-03 02:24:59,307 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:24:59,307 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [426003966] [2022-11-03 02:24:59,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:24:59,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:24:59,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:59,764 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:24:59,764 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:24:59,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [426003966] [2022-11-03 02:24:59,765 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [426003966] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:24:59,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1564087198] [2022-11-03 02:24:59,765 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:24:59,765 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:24:59,765 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:24:59,767 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:24:59,768 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-03 02:24:59,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:24:59,949 INFO L263 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-03 02:24:59,951 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:25:00,184 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:00,184 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:25:00,522 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:25:00,613 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:00,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1564087198] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:25:00,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1427845102] [2022-11-03 02:25:00,615 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:25:00,615 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:25:00,615 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:25:00,616 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:25:00,616 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:25:00,656 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:00,658 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:00,659 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:25:00,698 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:00,760 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:00,785 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:00,865 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:00,920 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:25:00,920 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:25:01,056 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:25:01,057 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:25:01,097 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:25:01,097 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:25:01,217 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:01,372 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:01,468 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:25:04,936 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18885#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:25:04,936 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:25:04,937 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:25:04,937 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-11-03 02:25:04,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956171441] [2022-11-03 02:25:04,937 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:25:04,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-03 02:25:04,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:25:04,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-03 02:25:04,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=1710, Unknown=0, NotChecked=0, Total=1892 [2022-11-03 02:25:04,938 INFO L87 Difference]: Start difference. First operand 412 states and 474 transitions. Second operand has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:06,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:25:06,168 INFO L93 Difference]: Finished difference Result 581 states and 657 transitions. [2022-11-03 02:25:06,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-03 02:25:06,168 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-03 02:25:06,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:25:06,172 INFO L225 Difference]: With dead ends: 581 [2022-11-03 02:25:06,172 INFO L226 Difference]: Without dead ends: 581 [2022-11-03 02:25:06,173 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 67 SyntacticMatches, 5 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 855 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=485, Invalid=3055, Unknown=0, NotChecked=0, Total=3540 [2022-11-03 02:25:06,173 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 209 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 1101 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 1129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 1101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:25:06,173 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 237 Invalid, 1129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 1101 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-03 02:25:06,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 581 states. [2022-11-03 02:25:06,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 581 to 470. [2022-11-03 02:25:06,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 470 states, 467 states have (on average 1.1798715203426124) internal successors, (551), 469 states have internal predecessors, (551), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:06,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 470 states to 470 states and 551 transitions. [2022-11-03 02:25:06,185 INFO L78 Accepts]: Start accepts. Automaton has 470 states and 551 transitions. Word has length 34 [2022-11-03 02:25:06,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:25:06,185 INFO L495 AbstractCegarLoop]: Abstraction has 470 states and 551 transitions. [2022-11-03 02:25:06,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:06,186 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 551 transitions. [2022-11-03 02:25:06,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 02:25:06,187 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:25:06,187 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:25:06,237 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-03 02:25:06,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-03 02:25:06,410 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:25:06,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:25:06,411 INFO L85 PathProgramCache]: Analyzing trace with hash -303989623, now seen corresponding path program 2 times [2022-11-03 02:25:06,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:25:06,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [405368122] [2022-11-03 02:25:06,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:25:06,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:25:06,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:25:07,339 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:25:07,340 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:25:07,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [405368122] [2022-11-03 02:25:07,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [405368122] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:25:07,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [957494611] [2022-11-03 02:25:07,340 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:25:07,341 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:07,341 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:25:07,342 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:25:07,343 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-03 02:25:07,679 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:25:07,679 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:25:07,683 INFO L263 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-03 02:25:07,686 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:25:07,690 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:25:07,921 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:07,989 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:25:08,176 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:25:08,265 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:25:08,287 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:25:08,298 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:25:08,302 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:25:08,303 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:25:08,319 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1206) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:25:08,328 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1206) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:25:08,339 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int)) (v_ArrVal_1205 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1205) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1206) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:25:08,352 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1206) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:08,364 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int)) (v_ArrVal_1204 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1204) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1206) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:08,375 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1206) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:08,396 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1206 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1206) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:25:08,404 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:25:08,405 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:25:08,414 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:25:08,414 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:25:08,671 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 8 proven. 10 refuted. 0 times theorem prover too weak. 3 trivial. 23 not checked. [2022-11-03 02:25:08,671 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [957494611] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:25:08,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [561077539] [2022-11-03 02:25:08,672 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:25:08,673 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:25:08,673 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:25:08,673 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:25:08,673 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:25:08,718 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:08,722 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:08,723 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:25:08,788 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:08,844 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:08,871 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:08,945 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:08,998 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:09,040 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:09,067 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:09,117 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:25:09,118 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:25:09,313 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:25:09,314 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:25:09,399 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:09,493 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:09,794 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:25:15,048 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20231#(and (or (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post4#1.base|) |ULTIMATE.start_cstrcat_#t~post4#1.offset|) 0) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrcat_#t~post5#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|)) (= |#NULL.base| 0)) (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 1 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (exists ((|v_ULTIMATE.start_cstrcat_#t~post4#1.offset_153| Int) (|v_ULTIMATE.start_cstrcat_#t~post4#1.base_154| Int)) (and (= (select |#valid| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_154|) 1) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.base_154|) (<= (+ |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_153| 1) (select |#length| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_154|)) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_153|) (not (= 0 (select (select |#memory_int| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_154|) |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_153|))))) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|))) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|))' at error location [2022-11-03 02:25:15,048 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:25:15,048 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:25:15,049 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 18, 18] total 40 [2022-11-03 02:25:15,049 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1243405274] [2022-11-03 02:25:15,049 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:25:15,049 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-03 02:25:15,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:25:15,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-03 02:25:15,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=2015, Unknown=7, NotChecked=672, Total=2862 [2022-11-03 02:25:15,050 INFO L87 Difference]: Start difference. First operand 470 states and 551 transitions. Second operand has 40 states, 40 states have (on average 1.95) internal successors, (78), 40 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:16,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:25:16,253 INFO L93 Difference]: Finished difference Result 568 states and 640 transitions. [2022-11-03 02:25:16,253 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-03 02:25:16,254 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.95) internal successors, (78), 40 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-03 02:25:16,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:25:16,257 INFO L225 Difference]: With dead ends: 568 [2022-11-03 02:25:16,257 INFO L226 Difference]: Without dead ends: 514 [2022-11-03 02:25:16,257 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 73 SyntacticMatches, 9 SemanticMatches, 60 ConstructedPredicates, 7 IntricatePredicates, 0 DeprecatedPredicates, 755 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=223, Invalid=2768, Unknown=7, NotChecked=784, Total=3782 [2022-11-03 02:25:16,258 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 81 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 1012 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 558 SdHoareTripleChecker+Invalid, 1720 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 1012 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 693 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:25:16,258 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 558 Invalid, 1720 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 1012 Invalid, 0 Unknown, 693 Unchecked, 0.6s Time] [2022-11-03 02:25:16,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 514 states. [2022-11-03 02:25:16,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 514 to 475. [2022-11-03 02:25:16,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 475 states, 472 states have (on average 1.152542372881356) internal successors, (544), 474 states have internal predecessors, (544), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:16,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 475 states to 475 states and 544 transitions. [2022-11-03 02:25:16,270 INFO L78 Accepts]: Start accepts. Automaton has 475 states and 544 transitions. Word has length 36 [2022-11-03 02:25:16,270 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:25:16,270 INFO L495 AbstractCegarLoop]: Abstraction has 475 states and 544 transitions. [2022-11-03 02:25:16,270 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.95) internal successors, (78), 40 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:16,271 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 544 transitions. [2022-11-03 02:25:16,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:25:16,272 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:25:16,272 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:25:16,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-03 02:25:16,490 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable47,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:16,491 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:25:16,491 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:25:16,491 INFO L85 PathProgramCache]: Analyzing trace with hash 707306453, now seen corresponding path program 3 times [2022-11-03 02:25:16,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:25:16,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725316772] [2022-11-03 02:25:16,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:25:16,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:25:16,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:25:17,339 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:17,339 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:25:17,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725316772] [2022-11-03 02:25:17,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1725316772] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:25:17,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1766581913] [2022-11-03 02:25:17,340 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:25:17,340 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:17,340 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:25:17,341 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:25:17,342 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-03 02:25:17,602 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:25:17,602 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:25:17,605 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-03 02:25:17,610 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:25:17,677 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:25:17,677 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:25:19,060 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 5 proven. 35 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:19,060 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:25:20,376 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 13 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:20,377 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1766581913] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:25:20,377 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1106705881] [2022-11-03 02:25:20,378 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:25:20,379 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:25:20,379 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:25:20,379 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:25:20,379 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:25:20,423 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:20,426 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:20,427 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:25:20,480 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:20,529 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:20,558 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:20,628 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:20,662 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:20,692 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:20,730 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:25:20,730 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:25:20,949 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:25:20,950 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:25:21,029 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:21,137 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:25:21,342 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:25:26,620 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21577#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:25:26,620 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:25:26,621 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:25:26,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 17] total 49 [2022-11-03 02:25:26,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [632618996] [2022-11-03 02:25:26,621 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:25:26,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-03 02:25:26,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:25:26,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-03 02:25:26,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=373, Invalid=3787, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:25:26,623 INFO L87 Difference]: Start difference. First operand 475 states and 544 transitions. Second operand has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:38,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:25:38,516 INFO L93 Difference]: Finished difference Result 772 states and 841 transitions. [2022-11-03 02:25:38,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2022-11-03 02:25:38,517 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:25:38,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:25:38,519 INFO L225 Difference]: With dead ends: 772 [2022-11-03 02:25:38,519 INFO L226 Difference]: Without dead ends: 724 [2022-11-03 02:25:38,521 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 133 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4935 ImplicationChecksByTransitivity, 17.7s TimeCoverageRelationStatistics Valid=2855, Invalid=15235, Unknown=0, NotChecked=0, Total=18090 [2022-11-03 02:25:38,522 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 766 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 1506 mSolverCounterSat, 253 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 766 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 1759 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 253 IncrementalHoareTripleChecker+Valid, 1506 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:25:38,522 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [766 Valid, 236 Invalid, 1759 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [253 Valid, 1506 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-03 02:25:38,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 724 states. [2022-11-03 02:25:38,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 724 to 479. [2022-11-03 02:25:38,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 479 states, 476 states have (on average 1.1554621848739495) internal successors, (550), 478 states have internal predecessors, (550), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:38,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 479 states to 479 states and 550 transitions. [2022-11-03 02:25:38,535 INFO L78 Accepts]: Start accepts. Automaton has 479 states and 550 transitions. Word has length 37 [2022-11-03 02:25:38,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:25:38,535 INFO L495 AbstractCegarLoop]: Abstraction has 479 states and 550 transitions. [2022-11-03 02:25:38,536 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:38,536 INFO L276 IsEmpty]: Start isEmpty. Operand 479 states and 550 transitions. [2022-11-03 02:25:38,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:25:38,537 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:25:38,537 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:25:38,582 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-11-03 02:25:38,762 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-03 02:25:38,762 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:25:38,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:25:38,763 INFO L85 PathProgramCache]: Analyzing trace with hash -2073607250, now seen corresponding path program 3 times [2022-11-03 02:25:38,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:25:38,763 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1477512148] [2022-11-03 02:25:38,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:25:38,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:25:38,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:25:39,249 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:25:39,249 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:25:39,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1477512148] [2022-11-03 02:25:39,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1477512148] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:25:39,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [485195078] [2022-11-03 02:25:39,250 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:25:39,250 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:39,250 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:25:39,251 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:25:39,252 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-03 02:25:39,468 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:25:39,468 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:25:39,471 INFO L263 TraceCheckSpWp]: Trace formula consists of 277 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-03 02:25:39,472 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:25:39,485 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:25:39,485 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:25:39,762 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 36 proven. 62 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:25:39,763 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:25:40,430 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 36 proven. 62 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:25:40,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [485195078] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:25:40,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [589991324] [2022-11-03 02:25:40,432 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-03 02:25:40,432 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:25:40,432 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:25:40,433 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:25:40,433 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:25:40,479 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:40,482 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:40,483 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:25:40,548 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,615 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,643 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,707 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,755 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,796 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,838 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:40,881 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:25:40,882 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:25:41,182 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:25:44,074 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23244#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:25:44,074 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:25:44,074 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:25:44,074 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 45 [2022-11-03 02:25:44,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790961715] [2022-11-03 02:25:44,074 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:25:44,075 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-03 02:25:44,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:25:44,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-03 02:25:44,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=354, Invalid=2726, Unknown=0, NotChecked=0, Total=3080 [2022-11-03 02:25:44,076 INFO L87 Difference]: Start difference. First operand 479 states and 550 transitions. Second operand has 46 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:45,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:25:45,902 INFO L93 Difference]: Finished difference Result 1173 states and 1271 transitions. [2022-11-03 02:25:45,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-03 02:25:45,903 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:25:45,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:25:45,907 INFO L225 Difference]: With dead ends: 1173 [2022-11-03 02:25:45,907 INFO L226 Difference]: Without dead ends: 1173 [2022-11-03 02:25:45,907 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1428 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=854, Invalid=4402, Unknown=0, NotChecked=0, Total=5256 [2022-11-03 02:25:45,908 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 356 mSDsluCounter, 557 mSDsCounter, 0 mSdLazyCounter, 2084 mSolverCounterSat, 84 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 588 SdHoareTripleChecker+Invalid, 2168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 2084 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:25:45,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [356 Valid, 588 Invalid, 2168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 2084 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-03 02:25:45,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1173 states. [2022-11-03 02:25:45,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1173 to 487. [2022-11-03 02:25:45,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 484 states have (on average 1.1611570247933884) internal successors, (562), 486 states have internal predecessors, (562), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:45,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 562 transitions. [2022-11-03 02:25:45,928 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 562 transitions. Word has length 37 [2022-11-03 02:25:45,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:25:45,928 INFO L495 AbstractCegarLoop]: Abstraction has 487 states and 562 transitions. [2022-11-03 02:25:45,928 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:45,928 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 562 transitions. [2022-11-03 02:25:45,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:25:45,930 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:25:45,930 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:25:45,978 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-03 02:25:46,152 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-03 02:25:46,152 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:25:46,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:25:46,152 INFO L85 PathProgramCache]: Analyzing trace with hash -1190548782, now seen corresponding path program 10 times [2022-11-03 02:25:46,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:25:46,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886887925] [2022-11-03 02:25:46,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:25:46,153 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:25:46,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:25:47,164 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 88 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:47,165 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:25:47,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886887925] [2022-11-03 02:25:47,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886887925] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:25:47,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [874380821] [2022-11-03 02:25:47,165 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:25:47,165 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:47,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:25:47,167 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:25:47,198 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-03 02:25:47,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:25:47,396 INFO L263 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-03 02:25:47,398 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:25:47,740 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:48,411 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:25:48,412 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:25:48,458 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:48,458 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:25:48,908 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:25:48,910 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:25:49,135 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:49,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [874380821] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:25:49,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [835667080] [2022-11-03 02:25:49,136 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:25:49,137 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:25:49,137 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:25:49,137 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:25:49,138 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:25:49,183 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:49,185 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:25:49,186 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:25:49,234 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:49,278 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:49,313 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:49,368 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:49,416 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:25:49,416 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:25:49,541 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:25:51,346 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25215#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:25:51,346 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:25:51,347 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:25:51,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 21] total 51 [2022-11-03 02:25:51,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032887289] [2022-11-03 02:25:51,347 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:25:51,347 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-03 02:25:51,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:25:51,347 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-03 02:25:51,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=172, Invalid=3250, Unknown=0, NotChecked=0, Total=3422 [2022-11-03 02:25:51,348 INFO L87 Difference]: Start difference. First operand 487 states and 562 transitions. Second operand has 51 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 51 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:55,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:25:55,995 INFO L93 Difference]: Finished difference Result 1335 states and 1458 transitions. [2022-11-03 02:25:55,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2022-11-03 02:25:55,996 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 51 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:25:55,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:25:56,002 INFO L225 Difference]: With dead ends: 1335 [2022-11-03 02:25:56,002 INFO L226 Difference]: Without dead ends: 1317 [2022-11-03 02:25:56,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 71 SyntacticMatches, 2 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 8 DeprecatedPredicates, 1662 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=511, Invalid=7679, Unknown=0, NotChecked=0, Total=8190 [2022-11-03 02:25:56,003 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 475 mSDsluCounter, 1075 mSDsCounter, 0 mSdLazyCounter, 3116 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 475 SdHoareTripleChecker+Valid, 1010 SdHoareTripleChecker+Invalid, 3992 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 3116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 829 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:25:56,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [475 Valid, 1010 Invalid, 3992 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 3116 Invalid, 0 Unknown, 829 Unchecked, 1.9s Time] [2022-11-03 02:25:56,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1317 states. [2022-11-03 02:25:56,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1317 to 571. [2022-11-03 02:25:56,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 571 states, 568 states have (on average 1.1742957746478873) internal successors, (667), 570 states have internal predecessors, (667), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:56,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 571 states and 667 transitions. [2022-11-03 02:25:56,019 INFO L78 Accepts]: Start accepts. Automaton has 571 states and 667 transitions. Word has length 37 [2022-11-03 02:25:56,020 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:25:56,020 INFO L495 AbstractCegarLoop]: Abstraction has 571 states and 667 transitions. [2022-11-03 02:25:56,020 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 51 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:25:56,020 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 667 transitions. [2022-11-03 02:25:56,021 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-03 02:25:56,022 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:25:56,022 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:25:56,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-03 02:25:56,242 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:56,242 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:25:56,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:25:56,243 INFO L85 PathProgramCache]: Analyzing trace with hash 81104054, now seen corresponding path program 8 times [2022-11-03 02:25:56,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:25:56,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [58351056] [2022-11-03 02:25:56,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:25:56,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:25:56,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:25:57,707 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 13 proven. 53 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:57,707 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:25:57,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [58351056] [2022-11-03 02:25:57,707 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [58351056] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:25:57,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [463693496] [2022-11-03 02:25:57,707 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:25:57,708 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:25:57,708 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:25:57,708 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:25:57,710 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-03 02:25:57,987 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-03 02:25:57,988 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:25:57,992 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 129 conjunts are in the unsatisfiable core [2022-11-03 02:25:57,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:25:58,006 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:25:58,363 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:25:58,433 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:25:58,624 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:25:58,813 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:25:59,013 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:25:59,206 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:25:59,379 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:25:59,381 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:25:59,381 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-03 02:25:59,386 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:25:59,386 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:25:59,398 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:25:59,407 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)))) is different from false [2022-11-03 02:25:59,417 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int)) (v_ArrVal_1420 (Array Int Int))) (= 0 (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1420) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)))) is different from false [2022-11-03 02:25:59,425 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:59,433 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int)) (v_ArrVal_1419 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1419) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:59,442 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:59,454 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int)) (v_ArrVal_1418 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1418) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:59,466 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1421) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:25:59,482 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1421 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1421) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:25:59,490 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:25:59,490 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:25:59,499 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:25:59,499 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:25:59,511 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:25:59,989 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 39 not checked. [2022-11-03 02:25:59,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [463693496] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:25:59,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [311126324] [2022-11-03 02:25:59,990 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:25:59,991 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:25:59,991 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:25:59,991 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:25:59,991 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:00,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:00,037 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:00,038 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:00,084 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:00,143 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:00,171 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:00,232 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:00,292 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:00,292 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:00,391 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:00,397 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:00,440 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:26:00,440 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:26:00,548 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:00,649 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:00,716 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:04,546 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27478#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:04,546 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:04,546 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:04,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 21, 21] total 62 [2022-11-03 02:26:04,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181073967] [2022-11-03 02:26:04,547 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:04,547 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-03 02:26:04,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:04,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-03 02:26:04,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=244, Invalid=4073, Unknown=9, NotChecked=1224, Total=5550 [2022-11-03 02:26:04,549 INFO L87 Difference]: Start difference. First operand 571 states and 667 transitions. Second operand has 62 states, 62 states have (on average 1.6290322580645162) internal successors, (101), 62 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:06,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:06,143 INFO L93 Difference]: Finished difference Result 687 states and 798 transitions. [2022-11-03 02:26:06,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-03 02:26:06,143 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.6290322580645162) internal successors, (101), 62 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-11-03 02:26:06,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:06,146 INFO L225 Difference]: With dead ends: 687 [2022-11-03 02:26:06,146 INFO L226 Difference]: Without dead ends: 623 [2022-11-03 02:26:06,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 69 SyntacticMatches, 3 SemanticMatches, 88 ConstructedPredicates, 9 IntricatePredicates, 6 DeprecatedPredicates, 2074 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=359, Invalid=6148, Unknown=9, NotChecked=1494, Total=8010 [2022-11-03 02:26:06,147 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 67 mSDsluCounter, 553 mSDsCounter, 0 mSdLazyCounter, 720 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 398 SdHoareTripleChecker+Invalid, 1295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 720 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 567 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:06,147 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 398 Invalid, 1295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 720 Invalid, 0 Unknown, 567 Unchecked, 0.5s Time] [2022-11-03 02:26:06,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 623 states. [2022-11-03 02:26:06,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 623 to 622. [2022-11-03 02:26:06,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 622 states, 619 states have (on average 1.1744749596122779) internal successors, (727), 621 states have internal predecessors, (727), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:06,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 622 states to 622 states and 727 transitions. [2022-11-03 02:26:06,156 INFO L78 Accepts]: Start accepts. Automaton has 622 states and 727 transitions. Word has length 38 [2022-11-03 02:26:06,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:06,157 INFO L495 AbstractCegarLoop]: Abstraction has 622 states and 727 transitions. [2022-11-03 02:26:06,157 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.6290322580645162) internal successors, (101), 62 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:06,157 INFO L276 IsEmpty]: Start isEmpty. Operand 622 states and 727 transitions. [2022-11-03 02:26:06,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-03 02:26:06,158 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:06,158 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:06,198 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:06,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:06,386 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:06,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:06,387 INFO L85 PathProgramCache]: Analyzing trace with hash -1985504476, now seen corresponding path program 9 times [2022-11-03 02:26:06,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:06,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [182636163] [2022-11-03 02:26:06,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:06,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:06,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:06,924 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:06,924 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:06,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [182636163] [2022-11-03 02:26:06,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [182636163] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:06,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [478618369] [2022-11-03 02:26:06,925 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:26:06,925 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:06,925 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:06,926 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:06,927 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-03 02:26:07,265 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:26:07,265 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:26:07,269 INFO L263 TraceCheckSpWp]: Trace formula consists of 340 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-03 02:26:07,270 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:07,530 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:07,530 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:07,861 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:26:07,958 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:07,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [478618369] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:07,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [29322388] [2022-11-03 02:26:07,959 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:26:07,959 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:07,959 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:07,959 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:07,959 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:08,003 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:08,008 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:08,018 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:08,056 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:08,098 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:08,120 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:08,166 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:08,215 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:08,216 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:08,311 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:08,313 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:08,346 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:26:08,346 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:26:08,433 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:08,577 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:08,664 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:12,039 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29104#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:12,039 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:12,039 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:12,039 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 34 [2022-11-03 02:26:12,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1477864313] [2022-11-03 02:26:12,040 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:12,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-03 02:26:12,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:12,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-03 02:26:12,041 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=209, Invalid=2047, Unknown=0, NotChecked=0, Total=2256 [2022-11-03 02:26:12,041 INFO L87 Difference]: Start difference. First operand 622 states and 727 transitions. Second operand has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:13,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:13,174 INFO L93 Difference]: Finished difference Result 839 states and 967 transitions. [2022-11-03 02:26:13,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-03 02:26:13,175 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-03 02:26:13,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:13,176 INFO L225 Difference]: With dead ends: 839 [2022-11-03 02:26:13,176 INFO L226 Difference]: Without dead ends: 839 [2022-11-03 02:26:13,177 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 82 SyntacticMatches, 6 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1116 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=615, Invalid=3807, Unknown=0, NotChecked=0, Total=4422 [2022-11-03 02:26:13,177 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 299 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 1003 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 299 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 1042 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1003 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:13,177 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [299 Valid, 236 Invalid, 1042 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1003 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-03 02:26:13,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839 states. [2022-11-03 02:26:13,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839 to 700. [2022-11-03 02:26:13,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 700 states, 697 states have (on average 1.1979913916786227) internal successors, (835), 699 states have internal predecessors, (835), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:13,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 700 states to 700 states and 835 transitions. [2022-11-03 02:26:13,189 INFO L78 Accepts]: Start accepts. Automaton has 700 states and 835 transitions. Word has length 40 [2022-11-03 02:26:13,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:13,190 INFO L495 AbstractCegarLoop]: Abstraction has 700 states and 835 transitions. [2022-11-03 02:26:13,190 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:13,190 INFO L276 IsEmpty]: Start isEmpty. Operand 700 states and 835 transitions. [2022-11-03 02:26:13,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-03 02:26:13,192 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:13,192 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:13,235 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:13,418 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable52 [2022-11-03 02:26:13,418 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:13,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:13,419 INFO L85 PathProgramCache]: Analyzing trace with hash -1421096581, now seen corresponding path program 3 times [2022-11-03 02:26:13,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:13,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [856542593] [2022-11-03 02:26:13,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:13,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:13,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:14,496 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:14,497 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:14,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [856542593] [2022-11-03 02:26:14,497 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [856542593] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:14,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1978692260] [2022-11-03 02:26:14,497 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:26:14,497 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:14,497 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:14,498 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:14,500 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-03 02:26:14,809 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:26:14,810 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:26:14,813 INFO L263 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-03 02:26:14,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:14,883 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:26:14,884 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:26:16,350 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:16,350 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:17,552 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 25 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:17,553 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1978692260] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:17,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [787811195] [2022-11-03 02:26:17,554 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:26:17,554 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:17,555 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:17,555 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:17,555 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:17,615 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:17,618 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:17,618 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:17,660 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:17,713 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:17,739 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:17,794 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:17,839 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:17,839 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:17,958 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:17,960 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:26:17,994 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:26:17,994 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:26:18,094 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:18,263 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:18,341 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:22,505 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30986#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:22,505 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:22,505 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:22,505 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 16, 16] total 50 [2022-11-03 02:26:22,505 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1575090820] [2022-11-03 02:26:22,506 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:22,506 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-03 02:26:22,506 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:22,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-03 02:26:22,507 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=403, Invalid=3757, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:26:22,507 INFO L87 Difference]: Start difference. First operand 700 states and 835 transitions. Second operand has 52 states, 51 states have (on average 2.411764705882353) internal successors, (123), 51 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:34,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:26:34,375 INFO L93 Difference]: Finished difference Result 943 states and 1076 transitions. [2022-11-03 02:26:34,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 77 states. [2022-11-03 02:26:34,376 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 2.411764705882353) internal successors, (123), 51 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-03 02:26:34,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:26:34,379 INFO L225 Difference]: With dead ends: 943 [2022-11-03 02:26:34,379 INFO L226 Difference]: Without dead ends: 943 [2022-11-03 02:26:34,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 137 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5229 ImplicationChecksByTransitivity, 16.4s TimeCoverageRelationStatistics Valid=3275, Invalid=15907, Unknown=0, NotChecked=0, Total=19182 [2022-11-03 02:26:34,381 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 1199 mSDsluCounter, 203 mSDsCounter, 0 mSdLazyCounter, 1490 mSolverCounterSat, 364 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1199 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 1854 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 364 IncrementalHoareTripleChecker+Valid, 1490 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:26:34,381 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1199 Valid, 213 Invalid, 1854 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [364 Valid, 1490 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-03 02:26:34,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 943 states. [2022-11-03 02:26:34,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 943 to 706. [2022-11-03 02:26:34,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 706 states, 703 states have (on average 1.197724039829303) internal successors, (842), 705 states have internal predecessors, (842), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:34,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 706 states to 706 states and 842 transitions. [2022-11-03 02:26:34,394 INFO L78 Accepts]: Start accepts. Automaton has 706 states and 842 transitions. Word has length 41 [2022-11-03 02:26:34,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:26:34,394 INFO L495 AbstractCegarLoop]: Abstraction has 706 states and 842 transitions. [2022-11-03 02:26:34,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 2.411764705882353) internal successors, (123), 51 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:26:34,395 INFO L276 IsEmpty]: Start isEmpty. Operand 706 states and 842 transitions. [2022-11-03 02:26:34,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-03 02:26:34,396 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:26:34,397 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:26:34,450 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-03 02:26:34,610 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-11-03 02:26:34,610 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:26:34,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:26:34,611 INFO L85 PathProgramCache]: Analyzing trace with hash -1369612387, now seen corresponding path program 4 times [2022-11-03 02:26:34,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:26:34,611 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1918971202] [2022-11-03 02:26:34,611 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:26:34,611 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:26:34,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:35,715 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 16 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:35,715 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:26:35,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1918971202] [2022-11-03 02:26:35,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1918971202] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:26:35,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [130131294] [2022-11-03 02:26:35,715 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:26:35,716 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:26:35,716 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:26:35,719 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:26:35,734 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-03 02:26:35,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:26:35,999 INFO L263 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-03 02:26:36,002 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:26:36,081 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:26:36,082 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:26:38,017 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 25 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:38,017 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:26:39,534 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 37 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:26:39,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [130131294] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:26:39,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [902090668] [2022-11-03 02:26:39,536 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:26:39,536 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:26:39,536 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:26:39,536 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:26:39,536 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:26:39,588 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:39,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:26:39,595 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:26:39,648 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:39,696 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:39,733 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:39,791 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:39,835 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:39,864 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:26:39,914 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:26:39,914 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:26:40,183 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:26:40,183 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:26:40,277 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:40,403 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:26:40,668 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:26:46,001 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33098#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:26:46,002 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:26:46,002 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:26:46,002 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 60 [2022-11-03 02:26:46,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297763413] [2022-11-03 02:26:46,002 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:26:46,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-03 02:26:46,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:26:46,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-03 02:26:46,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=513, Invalid=5187, Unknown=0, NotChecked=0, Total=5700 [2022-11-03 02:26:46,004 INFO L87 Difference]: Start difference. First operand 706 states and 842 transitions. Second operand has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:02,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:02,498 INFO L93 Difference]: Finished difference Result 1394 states and 1535 transitions. [2022-11-03 02:27:02,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 97 states. [2022-11-03 02:27:02,499 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-03 02:27:02,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:02,502 INFO L225 Difference]: With dead ends: 1394 [2022-11-03 02:27:02,502 INFO L226 Difference]: Without dead ends: 1282 [2022-11-03 02:27:02,504 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 168 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7784 ImplicationChecksByTransitivity, 22.3s TimeCoverageRelationStatistics Valid=4517, Invalid=24213, Unknown=0, NotChecked=0, Total=28730 [2022-11-03 02:27:02,505 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1096 mSDsluCounter, 435 mSDsCounter, 0 mSdLazyCounter, 2674 mSolverCounterSat, 347 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1096 SdHoareTripleChecker+Valid, 451 SdHoareTripleChecker+Invalid, 3021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 347 IncrementalHoareTripleChecker+Valid, 2674 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:02,505 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1096 Valid, 451 Invalid, 3021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [347 Valid, 2674 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 02:27:02,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1282 states. [2022-11-03 02:27:02,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1282 to 642. [2022-11-03 02:27:02,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 642 states, 639 states have (on average 1.165884194053208) internal successors, (745), 641 states have internal predecessors, (745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:02,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 642 states to 642 states and 745 transitions. [2022-11-03 02:27:02,517 INFO L78 Accepts]: Start accepts. Automaton has 642 states and 745 transitions. Word has length 41 [2022-11-03 02:27:02,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:02,517 INFO L495 AbstractCegarLoop]: Abstraction has 642 states and 745 transitions. [2022-11-03 02:27:02,518 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:02,518 INFO L276 IsEmpty]: Start isEmpty. Operand 642 states and 745 transitions. [2022-11-03 02:27:02,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-03 02:27:02,519 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:02,519 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:02,559 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:02,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-11-03 02:27:02,738 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:02,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:02,738 INFO L85 PathProgramCache]: Analyzing trace with hash -1721029719, now seen corresponding path program 11 times [2022-11-03 02:27:02,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:02,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [953574531] [2022-11-03 02:27:02,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:02,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:02,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:03,598 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 36 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:03,598 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:03,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [953574531] [2022-11-03 02:27:03,598 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [953574531] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:03,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [204312662] [2022-11-03 02:27:03,598 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:27:03,598 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:03,598 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:03,599 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:03,600 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-03 02:27:03,923 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-03 02:27:03,923 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:03,926 INFO L263 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 68 conjunts are in the unsatisfiable core [2022-11-03 02:27:03,927 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:04,250 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:04,942 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:27:04,943 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:27:04,987 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:04,987 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:05,479 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:27:05,481 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:27:05,683 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:05,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [204312662] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:05,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [788234909] [2022-11-03 02:27:05,684 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:27:05,684 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:05,684 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:05,684 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:05,685 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:05,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:05,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:05,722 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:05,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:05,811 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:05,835 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:05,887 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:05,941 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:05,941 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:06,055 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:07,816 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35632#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:07,817 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:07,817 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:07,817 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 23, 23] total 56 [2022-11-03 02:27:07,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1467454611] [2022-11-03 02:27:07,817 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:07,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-11-03 02:27:07,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:07,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-11-03 02:27:07,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=3842, Unknown=0, NotChecked=0, Total=4032 [2022-11-03 02:27:07,819 INFO L87 Difference]: Start difference. First operand 642 states and 745 transitions. Second operand has 56 states, 56 states have (on average 1.8392857142857142) internal successors, (103), 56 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:14,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:14,028 INFO L93 Difference]: Finished difference Result 1869 states and 2045 transitions. [2022-11-03 02:27:14,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-03 02:27:14,028 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 56 states have (on average 1.8392857142857142) internal successors, (103), 56 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-03 02:27:14,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:14,032 INFO L225 Difference]: With dead ends: 1869 [2022-11-03 02:27:14,032 INFO L226 Difference]: Without dead ends: 1849 [2022-11-03 02:27:14,033 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 80 SyntacticMatches, 2 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 9 DeprecatedPredicates, 2269 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=695, Invalid=10225, Unknown=0, NotChecked=0, Total=10920 [2022-11-03 02:27:14,033 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 689 mSDsluCounter, 1263 mSDsCounter, 0 mSdLazyCounter, 4024 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 689 SdHoareTripleChecker+Valid, 1195 SdHoareTripleChecker+Invalid, 4709 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 4024 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 572 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:14,033 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [689 Valid, 1195 Invalid, 4709 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 4024 Invalid, 0 Unknown, 572 Unchecked, 2.4s Time] [2022-11-03 02:27:14,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1849 states. [2022-11-03 02:27:14,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1849 to 766. [2022-11-03 02:27:14,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 766 states, 763 states have (on average 1.1756225425950197) internal successors, (897), 765 states have internal predecessors, (897), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:14,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 766 states to 766 states and 897 transitions. [2022-11-03 02:27:14,049 INFO L78 Accepts]: Start accepts. Automaton has 766 states and 897 transitions. Word has length 41 [2022-11-03 02:27:14,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:14,049 INFO L495 AbstractCegarLoop]: Abstraction has 766 states and 897 transitions. [2022-11-03 02:27:14,050 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 56 states have (on average 1.8392857142857142) internal successors, (103), 56 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:14,050 INFO L276 IsEmpty]: Start isEmpty. Operand 766 states and 897 transitions. [2022-11-03 02:27:14,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-03 02:27:14,052 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:14,052 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:14,092 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:14,274 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable55,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:14,274 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:14,274 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:14,275 INFO L85 PathProgramCache]: Analyzing trace with hash -1998265217, now seen corresponding path program 3 times [2022-11-03 02:27:14,275 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:14,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524956624] [2022-11-03 02:27:14,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:14,275 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:14,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:15,404 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:27:15,404 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:15,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524956624] [2022-11-03 02:27:15,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524956624] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:15,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1167003846] [2022-11-03 02:27:15,404 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:27:15,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:15,405 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:15,406 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:15,407 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-03 02:27:15,634 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:27:15,634 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:15,638 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 95 conjunts are in the unsatisfiable core [2022-11-03 02:27:15,640 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:15,645 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:27:15,906 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:15,967 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:27:16,144 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:27:16,237 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:27:16,300 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:27:16,319 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:16,328 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:27:16,331 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:27:16,332 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:16,344 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:27:16,351 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)))) is different from false [2022-11-03 02:27:16,360 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int)) (v_ArrVal_1708 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1708) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:27:16,369 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:16,378 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int)) (v_ArrVal_1707 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1707) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:16,388 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:16,396 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int)) (v_ArrVal_1706 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1706) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:16,405 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1709) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:16,422 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1709 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1709) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:27:16,427 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:27:16,428 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:27:16,434 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:27:16,435 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:27:16,660 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 10 proven. 17 refuted. 0 times theorem prover too weak. 3 trivial. 39 not checked. [2022-11-03 02:27:16,660 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1167003846] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:16,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [505756734] [2022-11-03 02:27:16,662 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:27:16,662 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:16,663 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:16,663 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:16,663 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:16,713 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:16,716 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:16,717 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:16,759 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:16,804 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:16,832 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:16,885 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:16,932 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:16,978 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:16,999 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:17,045 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:17,045 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:17,219 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:27:17,220 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:27:17,281 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:17,364 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:17,654 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:22,214 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '38653#(and (or (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post4#1.base|) |ULTIMATE.start_cstrcat_#t~post4#1.offset|) 0) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_cstrcat_#t~post5#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|)) (= |#NULL.base| 0)) (and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 1 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (exists ((|v_ULTIMATE.start_cstrcat_#t~post4#1.offset_234| Int) (|v_ULTIMATE.start_cstrcat_#t~post4#1.base_235| Int)) (and (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_235|) |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_234|) 0)) (<= (+ |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_234| 1) (select |#length| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_235|)) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.base_235|) (= (select |#valid| |v_ULTIMATE.start_cstrcat_#t~post4#1.base_235|) 1) (<= 0 |v_ULTIMATE.start_cstrcat_#t~post4#1.offset_234|))) (<= 1 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|))) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|))' at error location [2022-11-03 02:27:22,214 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:22,214 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:22,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 21, 21] total 49 [2022-11-03 02:27:22,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [72189223] [2022-11-03 02:27:22,215 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:22,215 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-03 02:27:22,215 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:22,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-03 02:27:22,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=196, Invalid=2693, Unknown=9, NotChecked=1008, Total=3906 [2022-11-03 02:27:22,216 INFO L87 Difference]: Start difference. First operand 766 states and 897 transitions. Second operand has 49 states, 49 states have (on average 1.9183673469387754) internal successors, (94), 49 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:23,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:23,676 INFO L93 Difference]: Finished difference Result 936 states and 1056 transitions. [2022-11-03 02:27:23,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-03 02:27:23,677 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 1.9183673469387754) internal successors, (94), 49 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-03 02:27:23,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:23,679 INFO L225 Difference]: With dead ends: 936 [2022-11-03 02:27:23,679 INFO L226 Difference]: Without dead ends: 844 [2022-11-03 02:27:23,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 89 SyntacticMatches, 13 SemanticMatches, 71 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 1152 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=263, Invalid=3796, Unknown=9, NotChecked=1188, Total=5256 [2022-11-03 02:27:23,679 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 137 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 1234 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 556 SdHoareTripleChecker+Invalid, 2319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 1234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1063 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:23,680 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 556 Invalid, 2319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 1234 Invalid, 0 Unknown, 1063 Unchecked, 0.7s Time] [2022-11-03 02:27:23,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 844 states. [2022-11-03 02:27:23,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 844 to 769. [2022-11-03 02:27:23,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 769 states, 766 states have (on average 1.1488250652741514) internal successors, (880), 768 states have internal predecessors, (880), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:23,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 769 states to 769 states and 880 transitions. [2022-11-03 02:27:23,690 INFO L78 Accepts]: Start accepts. Automaton has 769 states and 880 transitions. Word has length 42 [2022-11-03 02:27:23,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:23,690 INFO L495 AbstractCegarLoop]: Abstraction has 769 states and 880 transitions. [2022-11-03 02:27:23,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 1.9183673469387754) internal successors, (94), 49 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:23,691 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 880 transitions. [2022-11-03 02:27:23,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-03 02:27:23,692 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:23,693 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:23,726 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-03 02:27:23,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable56,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:23,906 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:23,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:23,907 INFO L85 PathProgramCache]: Analyzing trace with hash -395570516, now seen corresponding path program 10 times [2022-11-03 02:27:23,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:23,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432204579] [2022-11-03 02:27:23,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:23,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:23,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:25,017 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:25,017 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:25,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432204579] [2022-11-03 02:27:25,018 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432204579] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:25,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1293574616] [2022-11-03 02:27:25,018 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:27:25,018 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:25,018 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:25,019 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:25,022 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-03 02:27:25,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:25,251 INFO L263 TraceCheckSpWp]: Trace formula consists of 371 conjuncts, 114 conjunts are in the unsatisfiable core [2022-11-03 02:27:25,255 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:25,263 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:27:25,435 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:25,470 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:25,551 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:25,670 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:25,774 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:25,884 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:25,976 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:27:26,053 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:27:26,057 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:26,057 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:26,068 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:27:26,076 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:27:26,084 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int)) (v_ArrVal_1780 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1780) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:27:26,093 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,100 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1779 (Array Int Int)) (v_ArrVal_1781 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1779) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,109 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,117 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1778 (Array Int Int)) (v_ArrVal_1781 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1778) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,130 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,141 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1777 (Array Int Int)) (v_ArrVal_1781 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1777) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,151 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1781) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 5 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,162 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1781 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1781) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 5 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:27:26,167 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:27:26,167 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:27:26,174 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:27:26,174 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:27:26,178 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:27:26,548 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 59 not checked. [2022-11-03 02:27:26,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1293574616] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:26,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2019072237] [2022-11-03 02:27:26,550 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:27:26,550 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:26,550 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:26,551 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:26,551 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:26,581 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:26,583 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:26,584 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:26,627 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:26,667 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:26,693 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:26,749 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:26,801 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:26,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:26,913 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:27:26,916 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:27:26,956 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:27:26,956 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:27:27,055 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:27,157 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:27,225 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:30,374 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40720#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:30,374 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:30,374 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:30,374 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 24, 24] total 60 [2022-11-03 02:27:30,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931254670] [2022-11-03 02:27:30,374 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:30,375 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2022-11-03 02:27:30,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:30,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2022-11-03 02:27:30,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=231, Invalid=3584, Unknown=11, NotChecked=1430, Total=5256 [2022-11-03 02:27:30,376 INFO L87 Difference]: Start difference. First operand 769 states and 880 transitions. Second operand has 60 states, 60 states have (on average 1.7333333333333334) internal successors, (104), 60 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:32,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:27:32,400 INFO L93 Difference]: Finished difference Result 1083 states and 1238 transitions. [2022-11-03 02:27:32,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-03 02:27:32,400 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 60 states have (on average 1.7333333333333334) internal successors, (104), 60 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-03 02:27:32,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:27:32,403 INFO L225 Difference]: With dead ends: 1083 [2022-11-03 02:27:32,403 INFO L226 Difference]: Without dead ends: 977 [2022-11-03 02:27:32,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 86 SyntacticMatches, 16 SemanticMatches, 83 ConstructedPredicates, 11 IntricatePredicates, 0 DeprecatedPredicates, 1710 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=313, Invalid=5122, Unknown=11, NotChecked=1694, Total=7140 [2022-11-03 02:27:32,404 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 73 mSDsluCounter, 598 mSDsCounter, 0 mSdLazyCounter, 1676 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 2421 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 1676 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 713 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:27:32,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 432 Invalid, 2421 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 1676 Invalid, 0 Unknown, 713 Unchecked, 0.9s Time] [2022-11-03 02:27:32,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 977 states. [2022-11-03 02:27:32,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 977 to 912. [2022-11-03 02:27:32,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 912 states, 909 states have (on average 1.155115511551155) internal successors, (1050), 911 states have internal predecessors, (1050), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:32,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 912 states to 912 states and 1050 transitions. [2022-11-03 02:27:32,416 INFO L78 Accepts]: Start accepts. Automaton has 912 states and 1050 transitions. Word has length 44 [2022-11-03 02:27:32,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:27:32,417 INFO L495 AbstractCegarLoop]: Abstraction has 912 states and 1050 transitions. [2022-11-03 02:27:32,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 60 states have (on average 1.7333333333333334) internal successors, (104), 60 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:27:32,417 INFO L276 IsEmpty]: Start isEmpty. Operand 912 states and 1050 transitions. [2022-11-03 02:27:32,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-03 02:27:32,419 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:27:32,419 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:27:32,463 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Ended with exit code 0 [2022-11-03 02:27:32,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-11-03 02:27:32,634 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:27:32,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:27:32,635 INFO L85 PathProgramCache]: Analyzing trace with hash -703665341, now seen corresponding path program 5 times [2022-11-03 02:27:32,635 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:27:32,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469118604] [2022-11-03 02:27:32,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:27:32,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:27:32,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:27:33,479 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 5 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:33,480 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:27:33,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469118604] [2022-11-03 02:27:33,480 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469118604] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:27:33,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1923956159] [2022-11-03 02:27:33,480 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:27:33,480 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:27:33,480 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:27:33,481 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:27:33,482 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-03 02:27:33,953 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:27:33,954 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:27:33,957 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-03 02:27:33,960 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:27:34,016 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:27:34,016 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:27:35,116 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 3 proven. 63 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:35,116 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:27:36,615 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 25 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:27:36,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1923956159] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:27:36,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2054119279] [2022-11-03 02:27:36,616 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:27:36,616 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:27:36,616 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:27:36,617 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:27:36,617 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:27:36,665 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:36,667 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:27:36,668 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:27:36,702 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:36,754 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:36,782 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:36,841 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:36,884 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:36,914 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:36,951 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:27:36,986 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:27:36,986 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:27:37,160 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:27:37,160 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:27:37,220 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:37,315 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:27:37,498 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:27:42,234 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '43094#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:27:42,234 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:27:42,234 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:27:42,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 22, 20] total 62 [2022-11-03 02:27:42,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738752776] [2022-11-03 02:27:42,234 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:27:42,235 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-03 02:27:42,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:27:42,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-03 02:27:42,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=417, Invalid=5589, Unknown=0, NotChecked=0, Total=6006 [2022-11-03 02:27:42,236 INFO L87 Difference]: Start difference. First operand 912 states and 1050 transitions. Second operand has 64 states, 63 states have (on average 2.142857142857143) internal successors, (135), 63 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:00,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:00,288 INFO L93 Difference]: Finished difference Result 1730 states and 1881 transitions. [2022-11-03 02:28:00,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 122 states. [2022-11-03 02:28:00,288 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 63 states have (on average 2.142857142857143) internal successors, (135), 63 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-03 02:28:00,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:00,291 INFO L225 Difference]: With dead ends: 1730 [2022-11-03 02:28:00,292 INFO L226 Difference]: Without dead ends: 1594 [2022-11-03 02:28:00,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 272 GetRequests, 75 SyntacticMatches, 2 SemanticMatches, 195 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10290 ImplicationChecksByTransitivity, 22.7s TimeCoverageRelationStatistics Valid=5543, Invalid=33069, Unknown=0, NotChecked=0, Total=38612 [2022-11-03 02:28:00,295 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 2493 mSDsluCounter, 530 mSDsCounter, 0 mSdLazyCounter, 3247 mSolverCounterSat, 846 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2493 SdHoareTripleChecker+Valid, 539 SdHoareTripleChecker+Invalid, 4093 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 846 IncrementalHoareTripleChecker+Valid, 3247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:00,295 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2493 Valid, 539 Invalid, 4093 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [846 Valid, 3247 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 02:28:00,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1594 states. [2022-11-03 02:28:00,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1594 to 924. [2022-11-03 02:28:00,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 924 states, 921 states have (on average 1.1530944625407167) internal successors, (1062), 923 states have internal predecessors, (1062), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:00,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 924 states to 924 states and 1062 transitions. [2022-11-03 02:28:00,311 INFO L78 Accepts]: Start accepts. Automaton has 924 states and 1062 transitions. Word has length 45 [2022-11-03 02:28:00,311 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:00,311 INFO L495 AbstractCegarLoop]: Abstraction has 924 states and 1062 transitions. [2022-11-03 02:28:00,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 63 states have (on average 2.142857142857143) internal successors, (135), 63 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:00,312 INFO L276 IsEmpty]: Start isEmpty. Operand 924 states and 1062 transitions. [2022-11-03 02:28:00,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-03 02:28:00,313 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:00,313 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:00,347 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:00,526 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable58,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:00,526 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:00,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:00,527 INFO L85 PathProgramCache]: Analyzing trace with hash -1930462656, now seen corresponding path program 12 times [2022-11-03 02:28:00,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:00,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929585524] [2022-11-03 02:28:00,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:00,527 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:00,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:01,483 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 49 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:01,483 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:01,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929585524] [2022-11-03 02:28:01,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929585524] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:01,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [684591998] [2022-11-03 02:28:01,484 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:28:01,484 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:01,484 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:01,485 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:01,486 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-03 02:28:01,692 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:28:01,692 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:01,695 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 94 conjunts are in the unsatisfiable core [2022-11-03 02:28:01,696 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:02,094 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:04,227 INFO L356 Elim1Store]: treesize reduction 57, result has 12.3 percent of original size [2022-11-03 02:28:04,228 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 42 [2022-11-03 02:28:04,296 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 11 proven. 170 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:04,296 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:06,491 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 121 treesize of output 105 [2022-11-03 02:28:06,501 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:28:06,502 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 0 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 121 treesize of output 89 [2022-11-03 02:28:07,139 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-11-03 02:28:07,875 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 66 proven. 115 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:07,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [684591998] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:07,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1355414223] [2022-11-03 02:28:07,877 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:28:07,877 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:07,877 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:07,877 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:07,878 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:07,924 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:07,927 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:07,928 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:07,981 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:08,044 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:08,069 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:08,129 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:08,174 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:08,174 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:08,288 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:10,850 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '46349#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:10,850 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:10,850 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:10,850 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 32, 32] total 85 [2022-11-03 02:28:10,850 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1508096726] [2022-11-03 02:28:10,850 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:10,851 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-11-03 02:28:10,851 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:10,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-11-03 02:28:10,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=494, Invalid=8062, Unknown=0, NotChecked=0, Total=8556 [2022-11-03 02:28:10,852 INFO L87 Difference]: Start difference. First operand 924 states and 1062 transitions. Second operand has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:38,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:38,301 INFO L93 Difference]: Finished difference Result 2286 states and 2500 transitions. [2022-11-03 02:28:38,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 132 states. [2022-11-03 02:28:38,302 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-03 02:28:38,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:38,308 INFO L225 Difference]: With dead ends: 2286 [2022-11-03 02:28:38,308 INFO L226 Difference]: Without dead ends: 2264 [2022-11-03 02:28:38,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 261 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 193 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8444 ImplicationChecksByTransitivity, 29.6s TimeCoverageRelationStatistics Valid=2673, Invalid=35157, Unknown=0, NotChecked=0, Total=37830 [2022-11-03 02:28:38,310 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 1097 mSDsluCounter, 964 mSDsCounter, 0 mSdLazyCounter, 7240 mSolverCounterSat, 495 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1097 SdHoareTripleChecker+Valid, 960 SdHoareTripleChecker+Invalid, 8457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 495 IncrementalHoareTripleChecker+Valid, 7240 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 722 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:38,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1097 Valid, 960 Invalid, 8457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [495 Valid, 7240 Invalid, 0 Unknown, 722 Unchecked, 5.9s Time] [2022-11-03 02:28:38,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2264 states. [2022-11-03 02:28:38,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2264 to 1072. [2022-11-03 02:28:38,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1072 states, 1069 states have (on average 1.1655753040224508) internal successors, (1246), 1071 states have internal predecessors, (1246), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:38,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1072 states to 1072 states and 1246 transitions. [2022-11-03 02:28:38,325 INFO L78 Accepts]: Start accepts. Automaton has 1072 states and 1246 transitions. Word has length 45 [2022-11-03 02:28:38,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:38,326 INFO L495 AbstractCegarLoop]: Abstraction has 1072 states and 1246 transitions. [2022-11-03 02:28:38,326 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:38,326 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1246 transitions. [2022-11-03 02:28:38,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-03 02:28:38,328 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:38,328 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:38,365 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Ended with exit code 0 [2022-11-03 02:28:38,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-11-03 02:28:38,546 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:38,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:38,547 INFO L85 PathProgramCache]: Analyzing trace with hash 1508447898, now seen corresponding path program 11 times [2022-11-03 02:28:38,547 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:38,547 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1108195571] [2022-11-03 02:28:38,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:38,547 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:38,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:39,109 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 16 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:39,109 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:39,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1108195571] [2022-11-03 02:28:39,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1108195571] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:39,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [829957927] [2022-11-03 02:28:39,110 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:28:39,110 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:39,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:39,111 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:39,117 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-03 02:28:39,588 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-03 02:28:39,588 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:39,593 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 93 conjunts are in the unsatisfiable core [2022-11-03 02:28:39,597 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:40,440 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:40,440 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:41,058 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:28:41,413 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:41,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [829957927] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:41,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [809826575] [2022-11-03 02:28:41,414 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:28:41,415 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:41,415 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:41,415 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:41,415 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:41,456 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:41,459 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:41,459 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:41,500 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:41,553 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:41,581 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:41,656 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:41,711 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:41,712 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:41,873 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:28:41,874 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:28:41,921 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:28:41,922 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:28:42,111 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:42,278 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:42,357 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:28:46,411 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '50244#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:28:46,411 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:28:46,412 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:28:46,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 52 [2022-11-03 02:28:46,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772110988] [2022-11-03 02:28:46,412 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:28:46,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-03 02:28:46,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:28:46,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-03 02:28:46,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=3913, Unknown=0, NotChecked=0, Total=4290 [2022-11-03 02:28:46,414 INFO L87 Difference]: Start difference. First operand 1072 states and 1246 transitions. Second operand has 53 states, 52 states have (on average 2.6153846153846154) internal successors, (136), 53 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:52,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:28:52,579 INFO L93 Difference]: Finished difference Result 1391 states and 1560 transitions. [2022-11-03 02:28:52,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 81 states. [2022-11-03 02:28:52,580 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 52 states have (on average 2.6153846153846154) internal successors, (136), 53 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-03 02:28:52,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:28:52,583 INFO L225 Difference]: With dead ends: 1391 [2022-11-03 02:28:52,583 INFO L226 Difference]: Without dead ends: 1391 [2022-11-03 02:28:52,585 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 138 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4614 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=3188, Invalid=16272, Unknown=0, NotChecked=0, Total=19460 [2022-11-03 02:28:52,585 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 968 mSDsluCounter, 599 mSDsCounter, 0 mSdLazyCounter, 2054 mSolverCounterSat, 249 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 968 SdHoareTripleChecker+Valid, 545 SdHoareTripleChecker+Invalid, 2303 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 249 IncrementalHoareTripleChecker+Valid, 2054 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:28:52,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [968 Valid, 545 Invalid, 2303 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [249 Valid, 2054 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-03 02:28:52,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1391 states. [2022-11-03 02:28:52,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1391 to 1085. [2022-11-03 02:28:52,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 1082 states have (on average 1.1635859519408502) internal successors, (1259), 1084 states have internal predecessors, (1259), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:52,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1259 transitions. [2022-11-03 02:28:52,596 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1259 transitions. Word has length 46 [2022-11-03 02:28:52,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:28:52,597 INFO L495 AbstractCegarLoop]: Abstraction has 1085 states and 1259 transitions. [2022-11-03 02:28:52,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 52 states have (on average 2.6153846153846154) internal successors, (136), 53 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:28:52,597 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1259 transitions. [2022-11-03 02:28:52,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:28:52,599 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:28:52,599 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:28:52,647 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-11-03 02:28:52,826 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:52,826 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:28:52,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:28:52,827 INFO L85 PathProgramCache]: Analyzing trace with hash 609806313, now seen corresponding path program 6 times [2022-11-03 02:28:52,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:28:52,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061945735] [2022-11-03 02:28:52,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:28:52,827 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:28:52,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:28:53,923 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 9 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:53,923 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:28:53,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061945735] [2022-11-03 02:28:53,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061945735] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:28:53,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1615656322] [2022-11-03 02:28:53,924 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:28:53,924 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:28:53,924 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:28:53,925 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:28:53,928 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-03 02:28:54,330 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:28:54,330 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:28:54,335 INFO L263 TraceCheckSpWp]: Trace formula consists of 394 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-03 02:28:54,338 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:28:54,425 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:28:54,426 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:28:56,295 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 17 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:56,295 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:28:58,068 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 29 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:28:58,068 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1615656322] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:28:58,068 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1878046300] [2022-11-03 02:28:58,069 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:28:58,069 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:28:58,070 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:28:58,070 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:28:58,070 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:28:58,105 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:58,108 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:28:58,109 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:28:58,150 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:58,197 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:58,223 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:58,305 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:58,354 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:58,386 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:58,409 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:28:58,456 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:28:58,456 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:28:58,648 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:28:58,648 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:28:58,720 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:58,851 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:28:59,036 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:29:04,459 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '53232#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:29:04,459 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:29:04,459 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:29:04,459 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 21] total 61 [2022-11-03 02:29:04,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462690902] [2022-11-03 02:29:04,459 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:29:04,460 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-03 02:29:04,460 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:29:04,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-03 02:29:04,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=499, Invalid=5353, Unknown=0, NotChecked=0, Total=5852 [2022-11-03 02:29:04,460 INFO L87 Difference]: Start difference. First operand 1085 states and 1259 transitions. Second operand has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:23,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:29:23,866 INFO L93 Difference]: Finished difference Result 1569 states and 1744 transitions. [2022-11-03 02:29:23,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 106 states. [2022-11-03 02:29:23,867 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-03 02:29:23,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:29:23,869 INFO L225 Difference]: With dead ends: 1569 [2022-11-03 02:29:23,869 INFO L226 Difference]: Without dead ends: 1505 [2022-11-03 02:29:23,871 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9063 ImplicationChecksByTransitivity, 25.3s TimeCoverageRelationStatistics Valid=5548, Invalid=26672, Unknown=0, NotChecked=0, Total=32220 [2022-11-03 02:29:23,871 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 1192 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 2387 mSolverCounterSat, 406 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1192 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 2793 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 406 IncrementalHoareTripleChecker+Valid, 2387 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:29:23,871 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1192 Valid, 347 Invalid, 2793 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [406 Valid, 2387 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-11-03 02:29:23,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1505 states. [2022-11-03 02:29:23,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1505 to 1089. [2022-11-03 02:29:23,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 1086 states have (on average 1.1648250460405156) internal successors, (1265), 1088 states have internal predecessors, (1265), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:23,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1265 transitions. [2022-11-03 02:29:23,888 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1265 transitions. Word has length 49 [2022-11-03 02:29:23,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:29:23,888 INFO L495 AbstractCegarLoop]: Abstraction has 1089 states and 1265 transitions. [2022-11-03 02:29:23,888 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:29:23,889 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1265 transitions. [2022-11-03 02:29:23,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:29:23,890 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:29:23,891 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:29:23,923 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Ended with exit code 0 [2022-11-03 02:29:24,094 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:29:24,094 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:29:24,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:29:24,095 INFO L85 PathProgramCache]: Analyzing trace with hash 1957611275, now seen corresponding path program 7 times [2022-11-03 02:29:24,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:29:24,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1859479466] [2022-11-03 02:29:24,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:29:24,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:29:24,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:29:25,219 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 36 proven. 104 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:29:25,219 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:29:25,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1859479466] [2022-11-03 02:29:25,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1859479466] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:29:25,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [516490794] [2022-11-03 02:29:25,220 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:29:25,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:29:25,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:29:25,221 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:29:25,222 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-11-03 02:29:25,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:29:25,485 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-03 02:29:25,488 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:29:25,574 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:29:25,575 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:29:28,126 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 49 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:29:28,126 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:29:30,187 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 65 proven. 75 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:29:30,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [516490794] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:29:30,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1799672305] [2022-11-03 02:29:30,188 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:29:30,188 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:29:30,189 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:29:30,189 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:29:30,189 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:29:30,227 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:30,229 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:29:30,230 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:29:30,272 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:30,353 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:30,382 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:30,454 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:30,488 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:30,512 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:29:30,556 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:29:30,556 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:29:30,748 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:29:30,749 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:29:30,827 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:29:30,946 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:29:31,149 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:29:36,873 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '56472#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:29:36,873 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:29:36,874 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:29:36,874 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 72 [2022-11-03 02:29:36,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [360279980] [2022-11-03 02:29:36,874 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:29:36,875 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-11-03 02:29:36,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:29:36,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-11-03 02:29:36,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=683, Invalid=6973, Unknown=0, NotChecked=0, Total=7656 [2022-11-03 02:29:36,876 INFO L87 Difference]: Start difference. First operand 1089 states and 1265 transitions. Second operand has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:01,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:01,477 INFO L93 Difference]: Finished difference Result 2452 states and 2648 transitions. [2022-11-03 02:30:01,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 125 states. [2022-11-03 02:30:01,478 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-03 02:30:01,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:01,483 INFO L225 Difference]: With dead ends: 2452 [2022-11-03 02:30:01,483 INFO L226 Difference]: Without dead ends: 2300 [2022-11-03 02:30:01,486 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 208 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12106 ImplicationChecksByTransitivity, 30.3s TimeCoverageRelationStatistics Valid=7204, Invalid=36686, Unknown=0, NotChecked=0, Total=43890 [2022-11-03 02:30:01,486 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1053 mSDsluCounter, 757 mSDsCounter, 0 mSdLazyCounter, 4370 mSolverCounterSat, 355 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1053 SdHoareTripleChecker+Valid, 776 SdHoareTripleChecker+Invalid, 4725 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 355 IncrementalHoareTripleChecker+Valid, 4370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:01,486 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1053 Valid, 776 Invalid, 4725 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [355 Valid, 4370 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2022-11-03 02:30:01,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2300 states. [2022-11-03 02:30:01,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2300 to 961. [2022-11-03 02:30:01,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 961 states, 958 states have (on average 1.1346555323590815) internal successors, (1087), 960 states have internal predecessors, (1087), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:01,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 961 states to 961 states and 1087 transitions. [2022-11-03 02:30:01,506 INFO L78 Accepts]: Start accepts. Automaton has 961 states and 1087 transitions. Word has length 49 [2022-11-03 02:30:01,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:01,507 INFO L495 AbstractCegarLoop]: Abstraction has 961 states and 1087 transitions. [2022-11-03 02:30:01,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:01,507 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1087 transitions. [2022-11-03 02:30:01,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:30:01,509 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:01,509 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:01,543 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:01,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable62,48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:01,722 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:01,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:01,723 INFO L85 PathProgramCache]: Analyzing trace with hash -1225103721, now seen corresponding path program 13 times [2022-11-03 02:30:01,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:01,723 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1611795501] [2022-11-03 02:30:01,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:01,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:01,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:03,162 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 64 proven. 157 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:03,163 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:03,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1611795501] [2022-11-03 02:30:03,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1611795501] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:03,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1085352256] [2022-11-03 02:30:03,163 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:30:03,163 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:03,163 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:03,164 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:03,166 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-11-03 02:30:03,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:03,440 INFO L263 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-03 02:30:03,442 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:03,997 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:05,162 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:30:05,162 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:30:05,229 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:05,229 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:06,107 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:30:06,109 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:30:06,421 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:06,422 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1085352256] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:06,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1071766508] [2022-11-03 02:30:06,423 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:30:06,423 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:06,424 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:06,424 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:06,424 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:06,472 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:06,475 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:06,476 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:06,527 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:06,594 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:06,634 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:06,696 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:06,753 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:06,753 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:06,879 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:09,379 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '60497#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:09,379 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:09,379 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:09,379 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 27, 27] total 66 [2022-11-03 02:30:09,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837646482] [2022-11-03 02:30:09,380 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:09,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-03 02:30:09,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:09,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-03 02:30:09,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=229, Invalid=5173, Unknown=0, NotChecked=0, Total=5402 [2022-11-03 02:30:09,382 INFO L87 Difference]: Start difference. First operand 961 states and 1087 transitions. Second operand has 66 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:17,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:17,034 INFO L93 Difference]: Finished difference Result 3197 states and 3429 transitions. [2022-11-03 02:30:17,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-11-03 02:30:17,035 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-03 02:30:17,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:17,044 INFO L225 Difference]: With dead ends: 3197 [2022-11-03 02:30:17,045 INFO L226 Difference]: Without dead ends: 3173 [2022-11-03 02:30:17,046 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 98 SyntacticMatches, 2 SemanticMatches, 113 ConstructedPredicates, 0 IntricatePredicates, 11 DeprecatedPredicates, 2727 ImplicationChecksByTransitivity, 9.9s TimeCoverageRelationStatistics Valid=697, Invalid=12413, Unknown=0, NotChecked=0, Total=13110 [2022-11-03 02:30:17,046 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 678 mSDsluCounter, 1751 mSDsCounter, 0 mSdLazyCounter, 5256 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 678 SdHoareTripleChecker+Valid, 1641 SdHoareTripleChecker+Invalid, 6557 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 5256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1240 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:17,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [678 Valid, 1641 Invalid, 6557 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 5256 Invalid, 0 Unknown, 1240 Unchecked, 3.4s Time] [2022-11-03 02:30:17,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3173 states. [2022-11-03 02:30:17,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3173 to 1133. [2022-11-03 02:30:17,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1133 states, 1130 states have (on average 1.1424778761061947) internal successors, (1291), 1132 states have internal predecessors, (1291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:17,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1133 states to 1133 states and 1291 transitions. [2022-11-03 02:30:17,065 INFO L78 Accepts]: Start accepts. Automaton has 1133 states and 1291 transitions. Word has length 49 [2022-11-03 02:30:17,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:17,066 INFO L495 AbstractCegarLoop]: Abstraction has 1133 states and 1291 transitions. [2022-11-03 02:30:17,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:17,066 INFO L276 IsEmpty]: Start isEmpty. Operand 1133 states and 1291 transitions. [2022-11-03 02:30:17,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-03 02:30:17,067 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:17,068 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:17,101 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:17,268 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable63 [2022-11-03 02:30:17,268 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:17,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:17,269 INFO L85 PathProgramCache]: Analyzing trace with hash 2079777570, now seen corresponding path program 12 times [2022-11-03 02:30:17,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:17,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1604449690] [2022-11-03 02:30:17,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:17,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:17,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:19,218 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:19,219 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:19,219 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1604449690] [2022-11-03 02:30:19,219 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1604449690] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:19,219 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1201784292] [2022-11-03 02:30:19,219 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:30:19,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:19,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:19,221 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:19,222 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-11-03 02:30:19,829 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:30:19,830 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:30:19,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 415 conjuncts, 125 conjunts are in the unsatisfiable core [2022-11-03 02:30:19,840 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:19,846 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:30:20,279 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:20,359 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:30:20,565 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:30:20,679 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:30:20,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:30:20,843 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:30:20,927 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:30:20,950 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:30:20,959 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:30:20,963 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:20,963 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:20,977 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:30:20,985 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:30:20,994 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int)) (v_ArrVal_2231 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2231) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:30:21,026 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,034 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int)) (v_ArrVal_2230 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2230) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,043 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,055 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2229 (Array Int Int)) (v_ArrVal_2232 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2229) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,066 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,077 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2228 (Array Int Int)) (v_ArrVal_2232 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2228) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,087 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 5 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,096 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2227 (Array Int Int)) (v_ArrVal_2232 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2227) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 5 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,105 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2232) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 6 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,116 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2232 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_2232) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 6 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:30:21,122 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:30:21,123 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:30:21,130 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:30:21,130 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:30:21,412 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 83 not checked. [2022-11-03 02:30:21,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1201784292] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:21,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [187415741] [2022-11-03 02:30:21,414 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:30:21,414 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:21,414 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:21,414 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:21,415 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:21,450 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:21,452 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:21,453 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:21,495 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:21,545 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:21,571 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:21,630 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:21,692 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:21,693 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:21,805 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:21,807 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:21,847 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:30:21,848 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:30:21,984 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:22,139 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:22,242 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:26,532 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '65276#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:26,532 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:26,532 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:26,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 27, 27] total 64 [2022-11-03 02:30:26,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349020183] [2022-11-03 02:30:26,533 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:26,533 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-11-03 02:30:26,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:26,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-11-03 02:30:26,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=3836, Unknown=13, NotChecked=1768, Total=5852 [2022-11-03 02:30:26,534 INFO L87 Difference]: Start difference. First operand 1133 states and 1291 transitions. Second operand has 64 states, 64 states have (on average 1.8125) internal successors, (116), 64 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:29,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:29,144 INFO L93 Difference]: Finished difference Result 1553 states and 1772 transitions. [2022-11-03 02:30:29,145 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-03 02:30:29,145 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 64 states have (on average 1.8125) internal successors, (116), 64 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-03 02:30:29,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:29,149 INFO L225 Difference]: With dead ends: 1553 [2022-11-03 02:30:29,149 INFO L226 Difference]: Without dead ends: 1401 [2022-11-03 02:30:29,150 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 103 SyntacticMatches, 15 SemanticMatches, 89 ConstructedPredicates, 13 IntricatePredicates, 1 DeprecatedPredicates, 1564 ImplicationChecksByTransitivity, 7.7s TimeCoverageRelationStatistics Valid=326, Invalid=5719, Unknown=13, NotChecked=2132, Total=8190 [2022-11-03 02:30:29,151 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 77 mSDsluCounter, 714 mSDsCounter, 0 mSdLazyCounter, 1706 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 503 SdHoareTripleChecker+Invalid, 2748 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1706 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1023 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:29,151 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 503 Invalid, 2748 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1706 Invalid, 0 Unknown, 1023 Unchecked, 1.1s Time] [2022-11-03 02:30:29,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1401 states. [2022-11-03 02:30:29,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1401 to 1318. [2022-11-03 02:30:29,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1318 states, 1315 states have (on average 1.1482889733840305) internal successors, (1510), 1317 states have internal predecessors, (1510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:29,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1318 states to 1318 states and 1510 transitions. [2022-11-03 02:30:29,169 INFO L78 Accepts]: Start accepts. Automaton has 1318 states and 1510 transitions. Word has length 50 [2022-11-03 02:30:29,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:29,170 INFO L495 AbstractCegarLoop]: Abstraction has 1318 states and 1510 transitions. [2022-11-03 02:30:29,170 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 64 states have (on average 1.8125) internal successors, (116), 64 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:29,170 INFO L276 IsEmpty]: Start isEmpty. Operand 1318 states and 1510 transitions. [2022-11-03 02:30:29,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-03 02:30:29,172 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:29,173 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:29,224 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:29,389 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable64 [2022-11-03 02:30:29,389 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:29,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:29,390 INFO L85 PathProgramCache]: Analyzing trace with hash -59720560, now seen corresponding path program 13 times [2022-11-03 02:30:29,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:29,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071061124] [2022-11-03 02:30:29,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:29,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:29,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:30,273 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 25 proven. 122 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:30,273 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:30,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071061124] [2022-11-03 02:30:30,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071061124] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:30,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [475916057] [2022-11-03 02:30:30,274 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:30:30,274 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:30,274 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:30,277 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:30,278 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-11-03 02:30:30,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:30,569 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-03 02:30:30,570 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:30,977 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 36 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:30,977 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:31,523 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:30:31,714 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 36 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:31,714 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [475916057] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:31,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1073520535] [2022-11-03 02:30:31,715 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:30:31,715 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:31,716 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:31,716 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:31,716 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:31,757 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:31,760 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:31,761 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:31,818 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:31,867 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:31,894 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:31,955 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:32,017 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:32,017 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:32,127 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:32,128 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:32,168 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:30:32,169 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:30:32,287 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:32,458 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:32,558 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:36,859 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '68549#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:36,859 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:36,859 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:36,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 42 [2022-11-03 02:30:36,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501640603] [2022-11-03 02:30:36,859 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:36,860 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-11-03 02:30:36,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:36,860 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-11-03 02:30:36,860 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=2805, Unknown=0, NotChecked=0, Total=3080 [2022-11-03 02:30:36,861 INFO L87 Difference]: Start difference. First operand 1318 states and 1510 transitions. Second operand has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:38,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:30:38,696 INFO L93 Difference]: Finished difference Result 1547 states and 1730 transitions. [2022-11-03 02:30:38,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-03 02:30:38,697 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-03 02:30:38,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:30:38,701 INFO L225 Difference]: With dead ends: 1547 [2022-11-03 02:30:38,702 INFO L226 Difference]: Without dead ends: 1547 [2022-11-03 02:30:38,703 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 112 SyntacticMatches, 8 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1732 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=932, Invalid=5548, Unknown=0, NotChecked=0, Total=6480 [2022-11-03 02:30:38,703 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 421 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 1254 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 421 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 1312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 1254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:30:38,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [421 Valid, 327 Invalid, 1312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 1254 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-03 02:30:38,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1547 states. [2022-11-03 02:30:38,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1547 to 1335. [2022-11-03 02:30:38,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1335 states, 1332 states have (on average 1.1463963963963963) internal successors, (1527), 1334 states have internal predecessors, (1527), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:38,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1335 states to 1335 states and 1527 transitions. [2022-11-03 02:30:38,728 INFO L78 Accepts]: Start accepts. Automaton has 1335 states and 1527 transitions. Word has length 52 [2022-11-03 02:30:38,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:30:38,728 INFO L495 AbstractCegarLoop]: Abstraction has 1335 states and 1527 transitions. [2022-11-03 02:30:38,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:30:38,729 INFO L276 IsEmpty]: Start isEmpty. Operand 1335 states and 1527 transitions. [2022-11-03 02:30:38,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 02:30:38,730 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:30:38,730 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:30:38,759 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Forceful destruction successful, exit code 0 [2022-11-03 02:30:38,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable65 [2022-11-03 02:30:38,931 INFO L420 AbstractCegarLoop]: === Iteration 67 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:30:38,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:30:38,932 INFO L85 PathProgramCache]: Analyzing trace with hash -1851337329, now seen corresponding path program 4 times [2022-11-03 02:30:38,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:30:38,932 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909951633] [2022-11-03 02:30:38,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:30:38,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:30:38,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:40,161 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 25 proven. 129 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:40,161 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:30:40,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909951633] [2022-11-03 02:30:40,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909951633] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:30:40,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [10152422] [2022-11-03 02:30:40,162 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:30:40,162 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:30:40,162 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:30:40,163 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:30:40,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-11-03 02:30:40,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:30:40,478 INFO L263 TraceCheckSpWp]: Trace formula consists of 434 conjuncts, 121 conjunts are in the unsatisfiable core [2022-11-03 02:30:40,480 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:30:40,550 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:30:40,551 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:30:42,717 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 36 proven. 118 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:42,718 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:30:44,577 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 49 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:30:44,577 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [10152422] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:30:44,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1907466150] [2022-11-03 02:30:44,578 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:30:44,578 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:30:44,579 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:30:44,579 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:30:44,579 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:30:44,629 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:44,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:30:44,633 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:30:44,681 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:44,721 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:44,749 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:44,814 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:30:44,863 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:30:44,863 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:30:44,993 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:44,995 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:30:45,038 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:30:45,038 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:30:45,155 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:45,264 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:30:45,329 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:30:49,501 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '71868#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:30:49,501 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:30:49,501 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:30:49,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 60 [2022-11-03 02:30:49,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442248481] [2022-11-03 02:30:49,502 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:30:49,502 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-03 02:30:49,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:30:49,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-03 02:30:49,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=524, Invalid=5026, Unknown=0, NotChecked=0, Total=5550 [2022-11-03 02:30:49,503 INFO L87 Difference]: Start difference. First operand 1335 states and 1527 transitions. Second operand has 62 states, 61 states have (on average 2.6065573770491803) internal successors, (159), 61 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:03,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:31:03,262 INFO L93 Difference]: Finished difference Result 2125 states and 2336 transitions. [2022-11-03 02:31:03,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-11-03 02:31:03,262 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.6065573770491803) internal successors, (159), 61 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-03 02:31:03,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:31:03,267 INFO L225 Difference]: With dead ends: 2125 [2022-11-03 02:31:03,268 INFO L226 Difference]: Without dead ends: 2125 [2022-11-03 02:31:03,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4892 ImplicationChecksByTransitivity, 18.8s TimeCoverageRelationStatistics Valid=3474, Invalid=16832, Unknown=0, NotChecked=0, Total=20306 [2022-11-03 02:31:03,270 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 1354 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 2044 mSolverCounterSat, 412 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1354 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 2456 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 412 IncrementalHoareTripleChecker+Valid, 2044 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:31:03,270 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1354 Valid, 277 Invalid, 2456 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [412 Valid, 2044 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-03 02:31:03,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2125 states. [2022-11-03 02:31:03,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2125 to 1341. [2022-11-03 02:31:03,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1341 states, 1338 states have (on average 1.1464872944693572) internal successors, (1534), 1340 states have internal predecessors, (1534), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:03,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1341 states to 1341 states and 1534 transitions. [2022-11-03 02:31:03,286 INFO L78 Accepts]: Start accepts. Automaton has 1341 states and 1534 transitions. Word has length 53 [2022-11-03 02:31:03,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:31:03,286 INFO L495 AbstractCegarLoop]: Abstraction has 1341 states and 1534 transitions. [2022-11-03 02:31:03,286 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.6065573770491803) internal successors, (159), 61 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:31:03,286 INFO L276 IsEmpty]: Start isEmpty. Operand 1341 states and 1534 transitions. [2022-11-03 02:31:03,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 02:31:03,289 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:31:03,289 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:31:03,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-11-03 02:31:03,489 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable66,52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:31:03,490 INFO L420 AbstractCegarLoop]: === Iteration 68 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:31:03,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:31:03,490 INFO L85 PathProgramCache]: Analyzing trace with hash -1109841487, now seen corresponding path program 8 times [2022-11-03 02:31:03,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:31:03,490 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670994155] [2022-11-03 02:31:03,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:31:03,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:31:03,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:31:04,757 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 17 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:04,758 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:31:04,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670994155] [2022-11-03 02:31:04,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670994155] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:31:04,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1182679387] [2022-11-03 02:31:04,758 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:31:04,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:31:04,758 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:31:04,759 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:31:04,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-11-03 02:31:05,360 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-03 02:31:05,360 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:31:05,365 INFO L263 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-03 02:31:05,368 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:31:05,446 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:31:05,447 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:31:08,271 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 24 proven. 84 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:08,272 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:31:10,910 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 45 proven. 63 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:31:10,911 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1182679387] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:31:10,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [196984107] [2022-11-03 02:31:10,912 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:31:10,912 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:31:10,913 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:31:10,913 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:31:10,913 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:31:10,959 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:10,963 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:31:10,963 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:31:11,003 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:31:11,070 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:11,096 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:11,162 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:31:11,214 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:11,246 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:11,272 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:31:11,316 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:31:11,316 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:31:11,522 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:31:11,522 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:31:11,597 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:31:11,719 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:31:11,915 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:31:17,637 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '75871#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:31:17,637 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:31:17,637 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:31:17,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 26, 24] total 74 [2022-11-03 02:31:17,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1749206514] [2022-11-03 02:31:17,638 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:31:17,638 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2022-11-03 02:31:17,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:31:17,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2022-11-03 02:31:17,639 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=606, Invalid=7404, Unknown=0, NotChecked=0, Total=8010 [2022-11-03 02:31:17,639 INFO L87 Difference]: Start difference. First operand 1341 states and 1534 transitions. Second operand has 76 states, 75 states have (on average 2.12) internal successors, (159), 75 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:00,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:00,109 INFO L93 Difference]: Finished difference Result 2925 states and 3150 transitions. [2022-11-03 02:32:00,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 167 states. [2022-11-03 02:32:00,110 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 75 states have (on average 2.12) internal successors, (159), 75 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-03 02:32:00,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:00,114 INFO L225 Difference]: With dead ends: 2925 [2022-11-03 02:32:00,114 INFO L226 Difference]: Without dead ends: 2757 [2022-11-03 02:32:00,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 345 GetRequests, 91 SyntacticMatches, 2 SemanticMatches, 252 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18855 ImplicationChecksByTransitivity, 48.1s TimeCoverageRelationStatistics Valid=11257, Invalid=53005, Unknown=0, NotChecked=0, Total=64262 [2022-11-03 02:32:00,118 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 2269 mSDsluCounter, 734 mSDsCounter, 0 mSdLazyCounter, 4302 mSolverCounterSat, 773 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2269 SdHoareTripleChecker+Valid, 747 SdHoareTripleChecker+Invalid, 5075 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 773 IncrementalHoareTripleChecker+Valid, 4302 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:00,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2269 Valid, 747 Invalid, 5075 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [773 Valid, 4302 Invalid, 0 Unknown, 0 Unchecked, 4.6s Time] [2022-11-03 02:32:00,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2757 states. [2022-11-03 02:32:00,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2757 to 1361. [2022-11-03 02:32:00,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1361 states, 1358 states have (on average 1.1443298969072164) internal successors, (1554), 1360 states have internal predecessors, (1554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:00,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1361 states to 1361 states and 1554 transitions. [2022-11-03 02:32:00,136 INFO L78 Accepts]: Start accepts. Automaton has 1361 states and 1554 transitions. Word has length 53 [2022-11-03 02:32:00,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:00,136 INFO L495 AbstractCegarLoop]: Abstraction has 1361 states and 1554 transitions. [2022-11-03 02:32:00,136 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 75 states have (on average 2.12) internal successors, (159), 75 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:00,137 INFO L276 IsEmpty]: Start isEmpty. Operand 1361 states and 1554 transitions. [2022-11-03 02:32:00,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-03 02:32:00,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:00,139 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:00,191 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:00,362 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable67,53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:00,362 INFO L420 AbstractCegarLoop]: === Iteration 69 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:00,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:00,363 INFO L85 PathProgramCache]: Analyzing trace with hash 119259310, now seen corresponding path program 14 times [2022-11-03 02:32:00,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:00,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908058179] [2022-11-03 02:32:00,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:00,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:00,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:02,209 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 81 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:02,209 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:02,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908058179] [2022-11-03 02:32:02,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908058179] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:02,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [129648305] [2022-11-03 02:32:02,209 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:32:02,209 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:02,210 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:02,211 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:02,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Waiting until timeout for monitored process [2022-11-03 02:32:02,834 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 13 check-sat command(s) [2022-11-03 02:32:02,834 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:32:02,839 INFO L263 TraceCheckSpWp]: Trace formula consists of 371 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-03 02:32:02,841 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:03,504 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:04,920 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:32:04,920 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:32:04,995 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 12 proven. 253 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:04,995 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:06,063 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:32:06,065 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:32:06,392 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 12 proven. 253 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:06,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [129648305] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:06,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [61880955] [2022-11-03 02:32:06,394 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:32:06,394 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:06,395 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:06,395 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:06,395 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:06,438 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:06,442 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:06,443 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:06,517 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:06,573 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:06,601 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:06,653 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:06,722 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:32:06,722 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:32:06,835 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:09,371 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '80882#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:09,371 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:09,372 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:09,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 29, 29] total 71 [2022-11-03 02:32:09,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2029157368] [2022-11-03 02:32:09,372 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:09,372 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-11-03 02:32:09,372 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:09,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-11-03 02:32:09,373 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=248, Invalid=5914, Unknown=0, NotChecked=0, Total=6162 [2022-11-03 02:32:09,373 INFO L87 Difference]: Start difference. First operand 1361 states and 1554 transitions. Second operand has 71 states, 71 states have (on average 1.8732394366197183) internal successors, (133), 71 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:21,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:21,476 INFO L93 Difference]: Finished difference Result 4512 states and 4832 transitions. [2022-11-03 02:32:21,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 99 states. [2022-11-03 02:32:21,477 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 71 states have (on average 1.8732394366197183) internal successors, (133), 71 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-03 02:32:21,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:21,482 INFO L225 Difference]: With dead ends: 4512 [2022-11-03 02:32:21,482 INFO L226 Difference]: Without dead ends: 4486 [2022-11-03 02:32:21,483 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 107 SyntacticMatches, 14 SemanticMatches, 147 ConstructedPredicates, 0 IntricatePredicates, 12 DeprecatedPredicates, 6256 ImplicationChecksByTransitivity, 14.1s TimeCoverageRelationStatistics Valid=977, Invalid=21075, Unknown=0, NotChecked=0, Total=22052 [2022-11-03 02:32:21,483 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 388 mSDsluCounter, 3280 mSDsCounter, 0 mSdLazyCounter, 6568 mSolverCounterSat, 84 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 388 SdHoareTripleChecker+Valid, 3024 SdHoareTripleChecker+Invalid, 7794 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 6568 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1142 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:21,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [388 Valid, 3024 Invalid, 7794 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 6568 Invalid, 0 Unknown, 1142 Unchecked, 4.5s Time] [2022-11-03 02:32:21,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4486 states. [2022-11-03 02:32:21,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4486 to 1547. [2022-11-03 02:32:21,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1547 states, 1544 states have (on average 1.1522020725388602) internal successors, (1779), 1546 states have internal predecessors, (1779), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:21,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1547 states to 1547 states and 1779 transitions. [2022-11-03 02:32:21,511 INFO L78 Accepts]: Start accepts. Automaton has 1547 states and 1779 transitions. Word has length 53 [2022-11-03 02:32:21,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:21,511 INFO L495 AbstractCegarLoop]: Abstraction has 1547 states and 1779 transitions. [2022-11-03 02:32:21,511 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 71 states have (on average 1.8732394366197183) internal successors, (133), 71 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:21,511 INFO L276 IsEmpty]: Start isEmpty. Operand 1547 states and 1779 transitions. [2022-11-03 02:32:21,513 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-03 02:32:21,513 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:21,513 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:21,544 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:21,713 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable68 [2022-11-03 02:32:21,714 INFO L420 AbstractCegarLoop]: === Iteration 70 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:21,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:21,714 INFO L85 PathProgramCache]: Analyzing trace with hash -1515282920, now seen corresponding path program 14 times [2022-11-03 02:32:21,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:21,714 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786090648] [2022-11-03 02:32:21,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:21,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:21,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:24,327 INFO L134 CoverageAnalysis]: Checked inductivity of 177 backedges. 18 proven. 159 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:24,327 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:24,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786090648] [2022-11-03 02:32:24,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786090648] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:24,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [859930668] [2022-11-03 02:32:24,328 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:32:24,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:24,328 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:24,329 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:24,332 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Waiting until timeout for monitored process [2022-11-03 02:32:25,326 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-11-03 02:32:25,326 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:32:25,335 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 144 conjunts are in the unsatisfiable core [2022-11-03 02:32:25,338 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:25,344 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:32:25,950 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:26,054 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:32:26,333 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:32:26,478 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:32:26,577 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:32:26,677 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:32:26,779 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:32:26,880 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:32:26,991 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-03 02:32:27,072 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-03 02:32:27,076 INFO L134 CoverageAnalysis]: Checked inductivity of 177 backedges. 16 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:27,076 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:27,090 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-11-03 02:32:27,098 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)))) is different from false [2022-11-03 02:32:27,107 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int)) (v_ArrVal_2603 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2603) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-11-03 02:32:27,116 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,125 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int)) (v_ArrVal_2602 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2602) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,135 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,144 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int)) (v_ArrVal_2601 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2601) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,153 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,162 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int)) (v_ArrVal_2600 (Array Int Int))) (= 0 (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2600) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~append#1.offset|)))) is different from false [2022-11-03 02:32:27,171 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 5 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,180 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int)) (v_ArrVal_2599 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2599) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 5 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,190 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 6 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,199 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int)) (v_ArrVal_2598 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2598) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 6 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,209 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2604) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 7 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,222 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2604 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_2604) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 7 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-03 02:32:27,231 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:32:27,231 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:32:27,244 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:32:27,245 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:32:27,638 INFO L134 CoverageAnalysis]: Checked inductivity of 177 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 0 trivial. 111 not checked. [2022-11-03 02:32:27,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [859930668] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:27,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1904383257] [2022-11-03 02:32:27,639 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-11-03 02:32:27,640 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:27,640 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:27,640 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:27,640 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:27,695 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:27,700 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:27,701 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:27,751 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:27,808 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:27,839 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:27,932 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:27,979 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:32:27,979 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:32:28,111 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:32:28,112 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:32:28,157 INFO L356 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-11-03 02:32:28,157 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-11-03 02:32:28,274 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:28,379 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:28,492 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:33,213 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '87509#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:33,213 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:33,213 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:33,213 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [40, 30, 30] total 77 [2022-11-03 02:32:33,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416684143] [2022-11-03 02:32:33,214 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:33,214 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-11-03 02:32:33,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:33,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-11-03 02:32:33,215 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=258, Invalid=5337, Unknown=15, NotChecked=2400, Total=8010 [2022-11-03 02:32:33,215 INFO L87 Difference]: Start difference. First operand 1547 states and 1779 transitions. Second operand has 77 states, 77 states have (on average 1.7532467532467533) internal successors, (135), 77 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:37,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:32:37,879 INFO L93 Difference]: Finished difference Result 1723 states and 1978 transitions. [2022-11-03 02:32:37,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2022-11-03 02:32:37,880 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 77 states have (on average 1.7532467532467533) internal successors, (135), 77 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-03 02:32:37,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:32:37,882 INFO L225 Difference]: With dead ends: 1723 [2022-11-03 02:32:37,883 INFO L226 Difference]: Without dead ends: 1623 [2022-11-03 02:32:37,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 115 SyntacticMatches, 15 SemanticMatches, 116 ConstructedPredicates, 15 IntricatePredicates, 1 DeprecatedPredicates, 2660 ImplicationChecksByTransitivity, 11.1s TimeCoverageRelationStatistics Valid=433, Invalid=10115, Unknown=18, NotChecked=3240, Total=13806 [2022-11-03 02:32:37,884 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 100 mSDsluCounter, 985 mSDsCounter, 0 mSdLazyCounter, 1757 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 692 SdHoareTripleChecker+Invalid, 2823 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1757 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1055 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:32:37,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 692 Invalid, 2823 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1757 Invalid, 0 Unknown, 1055 Unchecked, 1.3s Time] [2022-11-03 02:32:37,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1623 states. [2022-11-03 02:32:37,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1623 to 1622. [2022-11-03 02:32:37,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1622 states, 1619 states have (on average 1.1531809759110563) internal successors, (1867), 1621 states have internal predecessors, (1867), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:37,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1622 states to 1622 states and 1867 transitions. [2022-11-03 02:32:37,902 INFO L78 Accepts]: Start accepts. Automaton has 1622 states and 1867 transitions. Word has length 56 [2022-11-03 02:32:37,902 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:32:37,902 INFO L495 AbstractCegarLoop]: Abstraction has 1622 states and 1867 transitions. [2022-11-03 02:32:37,903 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 77 states have (on average 1.7532467532467533) internal successors, (135), 77 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:32:37,903 INFO L276 IsEmpty]: Start isEmpty. Operand 1622 states and 1867 transitions. [2022-11-03 02:32:37,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-03 02:32:37,906 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:32:37,906 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:32:37,960 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Forceful destruction successful, exit code 0 [2022-11-03 02:32:38,134 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable69,55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:38,134 INFO L420 AbstractCegarLoop]: === Iteration 71 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:32:38,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:32:38,135 INFO L85 PathProgramCache]: Analyzing trace with hash -2024243881, now seen corresponding path program 9 times [2022-11-03 02:32:38,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:32:38,135 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607467974] [2022-11-03 02:32:38,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:32:38,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:32:38,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:32:39,673 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 13 proven. 103 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:32:39,673 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:32:39,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607467974] [2022-11-03 02:32:39,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607467974] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:32:39,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1393901244] [2022-11-03 02:32:39,673 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:32:39,674 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:32:39,674 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:32:39,675 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:32:39,676 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Waiting until timeout for monitored process [2022-11-03 02:32:40,174 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:32:40,174 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:32:40,180 INFO L263 TraceCheckSpWp]: Trace formula consists of 442 conjuncts, 99 conjunts are in the unsatisfiable core [2022-11-03 02:32:40,184 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:32:40,280 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:32:40,280 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:32:41,586 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:32:42,166 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:32:42,166 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 17 [2022-11-03 02:32:43,302 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 20 proven. 94 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:32:43,303 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:32:44,561 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-03 02:32:44,572 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-03 02:32:46,166 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 39 proven. 75 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:32:46,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1393901244] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:32:46,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [7441137] [2022-11-03 02:32:46,168 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:32:46,168 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:32:46,168 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:32:46,168 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:32:46,169 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:32:46,223 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:46,227 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:32:46,228 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:32:46,284 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:46,343 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,369 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,448 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:46,500 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,532 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,558 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:32:46,605 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:32:46,605 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:32:46,834 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:32:46,835 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:32:46,909 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:47,014 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:32:47,215 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:32:53,556 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '91343#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:32:53,557 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:32:53,557 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:32:53,557 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 23, 23] total 70 [2022-11-03 02:32:53,557 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539515389] [2022-11-03 02:32:53,557 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:32:53,558 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-03 02:32:53,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:32:53,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-03 02:32:53,559 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=505, Invalid=6805, Unknown=0, NotChecked=0, Total=7310 [2022-11-03 02:32:53,559 INFO L87 Difference]: Start difference. First operand 1622 states and 1867 transitions. Second operand has 72 states, 71 states have (on average 2.380281690140845) internal successors, (169), 71 states have internal predecessors, (169), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:15,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:33:15,508 INFO L93 Difference]: Finished difference Result 2327 states and 2580 transitions. [2022-11-03 02:33:15,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 102 states. [2022-11-03 02:33:15,508 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 71 states have (on average 2.380281690140845) internal successors, (169), 71 states have internal predecessors, (169), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-11-03 02:33:15,509 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:33:15,511 INFO L225 Difference]: With dead ends: 2327 [2022-11-03 02:33:15,511 INFO L226 Difference]: Without dead ends: 2212 [2022-11-03 02:33:15,513 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 307 GetRequests, 121 SyntacticMatches, 9 SemanticMatches, 177 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8054 ImplicationChecksByTransitivity, 29.3s TimeCoverageRelationStatistics Valid=5104, Invalid=26758, Unknown=0, NotChecked=0, Total=31862 [2022-11-03 02:33:15,513 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1047 mSDsluCounter, 737 mSDsCounter, 0 mSdLazyCounter, 3961 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1047 SdHoareTripleChecker+Valid, 740 SdHoareTripleChecker+Invalid, 4758 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 3961 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 543 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:33:15,514 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1047 Valid, 740 Invalid, 4758 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 3961 Invalid, 0 Unknown, 543 Unchecked, 3.8s Time] [2022-11-03 02:33:15,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2212 states. [2022-11-03 02:33:15,534 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2212 to 1632. [2022-11-03 02:33:15,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1632 states, 1629 states have (on average 1.1540822590546347) internal successors, (1880), 1631 states have internal predecessors, (1880), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:15,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1632 states to 1632 states and 1880 transitions. [2022-11-03 02:33:15,539 INFO L78 Accepts]: Start accepts. Automaton has 1632 states and 1880 transitions. Word has length 57 [2022-11-03 02:33:15,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:33:15,540 INFO L495 AbstractCegarLoop]: Abstraction has 1632 states and 1880 transitions. [2022-11-03 02:33:15,540 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 71 states have (on average 2.380281690140845) internal successors, (169), 71 states have internal predecessors, (169), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:15,540 INFO L276 IsEmpty]: Start isEmpty. Operand 1632 states and 1880 transitions. [2022-11-03 02:33:15,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-03 02:33:15,543 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:33:15,543 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:33:15,590 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Forceful destruction successful, exit code 0 [2022-11-03 02:33:15,762 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 56 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable70 [2022-11-03 02:33:15,762 INFO L420 AbstractCegarLoop]: === Iteration 72 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:33:15,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:33:15,763 INFO L85 PathProgramCache]: Analyzing trace with hash 1359308065, now seen corresponding path program 4 times [2022-11-03 02:33:15,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:33:15,763 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [540781422] [2022-11-03 02:33:15,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:33:15,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:33:15,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:16,857 INFO L134 CoverageAnalysis]: Checked inductivity of 289 backedges. 100 proven. 188 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:33:16,857 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:33:16,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [540781422] [2022-11-03 02:33:16,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [540781422] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:33:16,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1687759167] [2022-11-03 02:33:16,858 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:33:16,858 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:16,858 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:33:16,862 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:33:16,863 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Waiting until timeout for monitored process [2022-11-03 02:33:17,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:17,183 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-03 02:33:17,185 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:33:17,197 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:33:17,197 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:33:17,738 INFO L134 CoverageAnalysis]: Checked inductivity of 289 backedges. 121 proven. 167 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:33:17,738 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:33:19,181 INFO L134 CoverageAnalysis]: Checked inductivity of 289 backedges. 121 proven. 167 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:33:19,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1687759167] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:33:19,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2045219048] [2022-11-03 02:33:19,182 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-03 02:33:19,182 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:33:19,183 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:33:19,183 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:33:19,183 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:33:19,221 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:19,224 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:19,225 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:33:19,263 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,318 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,347 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,407 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,453 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,498 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,538 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:19,583 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:33:19,584 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:33:19,868 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:33:23,513 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '95930#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:33:23,513 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:33:23,513 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:33:23,513 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 28, 28] total 70 [2022-11-03 02:33:23,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738401877] [2022-11-03 02:33:23,514 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:33:23,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-11-03 02:33:23,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:33:23,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-11-03 02:33:23,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=749, Invalid=5731, Unknown=0, NotChecked=0, Total=6480 [2022-11-03 02:33:23,515 INFO L87 Difference]: Start difference. First operand 1632 states and 1880 transitions. Second operand has 71 states, 70 states have (on average 2.0428571428571427) internal successors, (143), 71 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:27,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:33:27,614 INFO L93 Difference]: Finished difference Result 4549 states and 4895 transitions. [2022-11-03 02:33:27,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-11-03 02:33:27,619 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 70 states have (on average 2.0428571428571427) internal successors, (143), 71 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-11-03 02:33:27,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:33:27,626 INFO L225 Difference]: With dead ends: 4549 [2022-11-03 02:33:27,627 INFO L226 Difference]: Without dead ends: 4549 [2022-11-03 02:33:27,628 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 224 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 106 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3123 ImplicationChecksByTransitivity, 6.8s TimeCoverageRelationStatistics Valid=1979, Invalid=9577, Unknown=0, NotChecked=0, Total=11556 [2022-11-03 02:33:27,629 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 539 mSDsluCounter, 1311 mSDsCounter, 0 mSdLazyCounter, 4453 mSolverCounterSat, 130 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 539 SdHoareTripleChecker+Valid, 1376 SdHoareTripleChecker+Invalid, 4583 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 4453 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:33:27,629 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [539 Valid, 1376 Invalid, 4583 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 4453 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-03 02:33:27,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4549 states. [2022-11-03 02:33:27,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4549 to 1646. [2022-11-03 02:33:27,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1646 states, 1643 states have (on average 1.1570298234936092) internal successors, (1901), 1645 states have internal predecessors, (1901), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:27,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1646 states to 1646 states and 1901 transitions. [2022-11-03 02:33:27,669 INFO L78 Accepts]: Start accepts. Automaton has 1646 states and 1901 transitions. Word has length 57 [2022-11-03 02:33:27,669 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:33:27,669 INFO L495 AbstractCegarLoop]: Abstraction has 1646 states and 1901 transitions. [2022-11-03 02:33:27,669 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 70 states have (on average 2.0428571428571427) internal successors, (143), 71 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:33:27,670 INFO L276 IsEmpty]: Start isEmpty. Operand 1646 states and 1901 transitions. [2022-11-03 02:33:27,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-03 02:33:27,672 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:33:27,672 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 10, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:33:27,722 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Forceful destruction successful, exit code 0 [2022-11-03 02:33:27,876 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable71,57 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:27,877 INFO L420 AbstractCegarLoop]: === Iteration 73 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-11-03 02:33:27,877 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:33:27,877 INFO L85 PathProgramCache]: Analyzing trace with hash 1774462329, now seen corresponding path program 10 times [2022-11-03 02:33:27,877 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:33:27,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [400114137] [2022-11-03 02:33:27,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:33:27,877 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:33:27,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:29,426 INFO L134 CoverageAnalysis]: Checked inductivity of 214 backedges. 64 proven. 150 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:29,426 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:33:29,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [400114137] [2022-11-03 02:33:29,426 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [400114137] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:33:29,427 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [132908290] [2022-11-03 02:33:29,428 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:33:29,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:33:29,428 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:33:29,429 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:33:29,431 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2370e49-c275-4905-a6e8-cc8d80ab1206/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Waiting until timeout for monitored process [2022-11-03 02:33:29,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:33:29,746 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-03 02:33:29,748 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:33:29,823 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:33:29,823 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:33:33,132 INFO L134 CoverageAnalysis]: Checked inductivity of 214 backedges. 81 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:33,132 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:33:35,930 INFO L134 CoverageAnalysis]: Checked inductivity of 214 backedges. 101 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:33:35,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [132908290] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:33:35,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1085591223] [2022-11-03 02:33:35,932 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-03 02:33:35,932 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:33:35,932 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:33:35,932 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:33:35,933 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:33:35,973 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:35,976 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:33:35,977 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:33:36,013 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:36,059 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:36,082 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:36,142 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:36,179 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:36,202 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:33:36,251 INFO L356 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-03 02:33:36,252 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-03 02:33:36,470 INFO L356 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-11-03 02:33:36,471 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-11-03 02:33:36,548 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:36,643 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:33:36,846 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:33:43,036 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '102611#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:33:43,036 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:33:43,036 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:33:43,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 28, 28] total 84 [2022-11-03 02:33:43,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [171932240] [2022-11-03 02:33:43,037 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:33:43,037 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 86 states [2022-11-03 02:33:43,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:33:43,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 86 interpolants. [2022-11-03 02:33:43,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=894, Invalid=9006, Unknown=0, NotChecked=0, Total=9900 [2022-11-03 02:33:43,039 INFO L87 Difference]: Start difference. First operand 1646 states and 1901 transitions. Second operand has 86 states, 85 states have (on average 2.011764705882353) internal successors, (171), 85 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)