./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:34:09,523 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:34:09,527 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:34:09,564 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:34:09,565 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:34:09,566 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:34:09,568 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:34:09,571 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:34:09,573 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:34:09,575 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:34:09,576 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:34:09,578 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:34:09,579 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:34:09,581 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:34:09,582 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:34:09,584 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:34:09,586 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:34:09,587 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:34:09,590 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:34:09,592 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:34:09,594 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:34:09,596 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:34:09,598 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:34:09,600 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:34:09,605 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:34:09,605 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:34:09,606 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:34:09,607 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:34:09,608 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:34:09,610 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:34:09,610 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:34:09,612 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:34:09,613 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:34:09,614 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:34:09,616 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:34:09,617 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:34:09,618 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:34:09,619 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:34:09,619 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:34:09,621 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:34:09,622 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:34:09,623 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-03 02:34:09,653 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:34:09,654 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:34:09,654 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:34:09,655 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:34:09,656 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:34:09,656 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:34:09,656 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:34:09,657 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:34:09,657 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:34:09,657 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:34:09,658 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:34:09,658 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:34:09,659 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:34:09,659 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:34:09,659 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:34:09,660 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:34:09,660 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:34:09,660 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:34:09,661 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-03 02:34:09,662 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-03 02:34:09,662 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:34:09,663 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:34:09,663 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-03 02:34:09,663 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:34:09,664 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:34:09,664 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:34:09,664 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-03 02:34:09,665 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-03 02:34:09,665 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-03 02:34:09,665 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:34:09,666 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-03 02:34:09,666 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:34:09,666 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:34:09,667 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:34:09,667 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:34:09,667 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:34:09,668 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:34:09,668 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:34:09,668 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:34:09,669 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:34:09,669 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:34:09,669 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:34:09,670 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 [2022-11-03 02:34:09,962 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:34:10,010 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:34:10,013 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:34:10,015 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:34:10,020 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:34:10,022 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-03 02:34:10,115 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/data/d21cb6433/579b434ef9bf4e1fa70c857814e5e67a/FLAG51d211e2e [2022-11-03 02:34:10,801 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:34:10,802 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-11-03 02:34:10,829 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/data/d21cb6433/579b434ef9bf4e1fa70c857814e5e67a/FLAG51d211e2e [2022-11-03 02:34:11,102 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/data/d21cb6433/579b434ef9bf4e1fa70c857814e5e67a [2022-11-03 02:34:11,105 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:34:11,108 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:34:11,113 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:34:11,114 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:34:11,119 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:34:11,121 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,124 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16eaeb38 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11, skipping insertion in model container [2022-11-03 02:34:11,124 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,133 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:34:11,207 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:34:11,635 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:34:11,652 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:34:11,721 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:34:11,753 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:34:11,753 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11 WrapperNode [2022-11-03 02:34:11,754 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:34:11,755 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:34:11,756 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:34:11,756 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:34:11,767 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,783 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,813 INFO L138 Inliner]: procedures = 117, calls = 17, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-03 02:34:11,813 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:34:11,814 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:34:11,815 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:34:11,815 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:34:11,827 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,827 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,842 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,857 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,866 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,882 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,885 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,886 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,890 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:34:11,891 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:34:11,891 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:34:11,892 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:34:11,897 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (1/1) ... [2022-11-03 02:34:11,918 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:34:11,936 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:11,949 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:34:11,952 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:34:11,999 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-03 02:34:12,000 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-03 02:34:12,000 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-03 02:34:12,000 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-03 02:34:12,001 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:34:12,001 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:34:12,172 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:34:12,175 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:34:12,630 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:34:12,722 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:34:12,723 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-03 02:34:12,726 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:34:12 BoogieIcfgContainer [2022-11-03 02:34:12,727 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:34:12,730 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:34:12,730 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:34:12,736 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:34:12,737 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:34:11" (1/3) ... [2022-11-03 02:34:12,738 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@109fed84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:34:12, skipping insertion in model container [2022-11-03 02:34:12,739 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:34:11" (2/3) ... [2022-11-03 02:34:12,753 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@109fed84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:34:12, skipping insertion in model container [2022-11-03 02:34:12,754 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:34:12" (3/3) ... [2022-11-03 02:34:12,756 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrncat-alloca-2.i [2022-11-03 02:34:12,787 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:34:12,788 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 17 error locations. [2022-11-03 02:34:12,882 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:34:12,897 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2c5d4d33, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:34:12,897 INFO L358 AbstractCegarLoop]: Starting to check reachability of 17 error locations. [2022-11-03 02:34:12,918 INFO L276 IsEmpty]: Start isEmpty. Operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:12,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-03 02:34:12,931 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:12,932 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-03 02:34:12,933 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:12,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:12,944 INFO L85 PathProgramCache]: Analyzing trace with hash 163242, now seen corresponding path program 1 times [2022-11-03 02:34:12,956 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:12,957 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653758523] [2022-11-03 02:34:12,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:12,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:13,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:13,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:13,277 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:13,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653758523] [2022-11-03 02:34:13,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653758523] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:13,279 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:13,279 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-03 02:34:13,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50229916] [2022-11-03 02:34:13,286 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:13,293 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:34:13,293 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:13,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:34:13,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:13,347 INFO L87 Difference]: Start difference. First operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:13,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:13,483 INFO L93 Difference]: Finished difference Result 38 states and 44 transitions. [2022-11-03 02:34:13,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:34:13,487 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-03 02:34:13,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:13,498 INFO L225 Difference]: With dead ends: 38 [2022-11-03 02:34:13,499 INFO L226 Difference]: Without dead ends: 36 [2022-11-03 02:34:13,502 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:13,509 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:13,511 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 51 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:13,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-03 02:34:13,554 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-03 02:34:13,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:13,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-03 02:34:13,561 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-03 02:34:13,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:13,561 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-03 02:34:13,562 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:13,564 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-03 02:34:13,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-03 02:34:13,565 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:13,565 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-03 02:34:13,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:34:13,567 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:13,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:13,568 INFO L85 PathProgramCache]: Analyzing trace with hash 5059762, now seen corresponding path program 1 times [2022-11-03 02:34:13,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:13,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597915438] [2022-11-03 02:34:13,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:13,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:13,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:13,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:13,963 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:13,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597915438] [2022-11-03 02:34:13,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597915438] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:13,964 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:13,965 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:34:13,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1618950223] [2022-11-03 02:34:13,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:13,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:34:13,967 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:13,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:34:13,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:13,970 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:14,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:14,050 INFO L93 Difference]: Finished difference Result 34 states and 39 transitions. [2022-11-03 02:34:14,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:34:14,050 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-03 02:34:14,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:14,054 INFO L225 Difference]: With dead ends: 34 [2022-11-03 02:34:14,055 INFO L226 Difference]: Without dead ends: 34 [2022-11-03 02:34:14,060 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:14,063 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:14,063 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 18 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:14,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-03 02:34:14,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-03 02:34:14,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:14,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-03 02:34:14,079 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 4 [2022-11-03 02:34:14,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:14,080 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-03 02:34:14,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:14,080 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-03 02:34:14,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-03 02:34:14,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:14,081 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-03 02:34:14,081 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:34:14,082 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:14,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:14,083 INFO L85 PathProgramCache]: Analyzing trace with hash 5059763, now seen corresponding path program 1 times [2022-11-03 02:34:14,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:14,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533060907] [2022-11-03 02:34:14,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:14,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:14,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:14,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:14,648 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:14,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533060907] [2022-11-03 02:34:14,649 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533060907] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:14,649 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:14,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:34:14,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406733926] [2022-11-03 02:34:14,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:14,653 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:34:14,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:14,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:34:14,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:34:14,655 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:14,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:14,906 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-03 02:34:14,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:14,907 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-03 02:34:14,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:14,909 INFO L225 Difference]: With dead ends: 65 [2022-11-03 02:34:14,909 INFO L226 Difference]: Without dead ends: 65 [2022-11-03 02:34:14,910 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:34:14,911 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 108 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:14,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 49 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:34:14,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-03 02:34:14,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 36. [2022-11-03 02:34:14,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 2.0) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:14,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-03 02:34:14,920 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 4 [2022-11-03 02:34:14,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:14,920 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-03 02:34:14,920 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:14,921 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-03 02:34:14,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:34:14,922 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:14,922 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:34:14,922 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-03 02:34:14,922 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:14,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:14,923 INFO L85 PathProgramCache]: Analyzing trace with hash 156955998, now seen corresponding path program 1 times [2022-11-03 02:34:14,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:14,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [424858965] [2022-11-03 02:34:14,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:14,925 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:14,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:15,027 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:15,027 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:15,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [424858965] [2022-11-03 02:34:15,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [424858965] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:15,028 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:15,029 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:34:15,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [208020151] [2022-11-03 02:34:15,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:15,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:34:15,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:15,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:34:15,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:34:15,032 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:15,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:15,181 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-11-03 02:34:15,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:15,182 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:34:15,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:15,183 INFO L225 Difference]: With dead ends: 62 [2022-11-03 02:34:15,183 INFO L226 Difference]: Without dead ends: 62 [2022-11-03 02:34:15,184 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:34:15,185 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 129 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:15,186 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 74 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:15,194 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-03 02:34:15,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 37. [2022-11-03 02:34:15,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:15,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-03 02:34:15,205 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-11-03 02:34:15,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:15,205 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-03 02:34:15,206 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:15,207 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-03 02:34:15,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-03 02:34:15,209 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:15,209 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-03 02:34:15,209 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:34:15,210 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:15,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:15,210 INFO L85 PathProgramCache]: Analyzing trace with hash 156958550, now seen corresponding path program 1 times [2022-11-03 02:34:15,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:15,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510007851] [2022-11-03 02:34:15,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:15,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:15,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:15,520 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:15,520 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:15,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510007851] [2022-11-03 02:34:15,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510007851] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:15,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:15,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:34:15,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557252430] [2022-11-03 02:34:15,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:15,524 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:34:15,524 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:15,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:34:15,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:34:15,527 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:15,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:15,606 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-03 02:34:15,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:15,607 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-03 02:34:15,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:15,610 INFO L225 Difference]: With dead ends: 37 [2022-11-03 02:34:15,611 INFO L226 Difference]: Without dead ends: 36 [2022-11-03 02:34:15,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:34:15,621 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 42 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:15,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 73 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:15,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-03 02:34:15,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-03 02:34:15,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:15,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-03 02:34:15,637 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 5 [2022-11-03 02:34:15,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:15,638 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-03 02:34:15,638 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:15,639 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-03 02:34:15,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-03 02:34:15,644 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:15,645 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-03 02:34:15,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-03 02:34:15,645 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:15,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:15,646 INFO L85 PathProgramCache]: Analyzing trace with hash 567552496, now seen corresponding path program 1 times [2022-11-03 02:34:15,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:15,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271848437] [2022-11-03 02:34:15,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:15,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:15,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:16,050 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:16,051 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:16,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271848437] [2022-11-03 02:34:16,051 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271848437] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:16,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1522641102] [2022-11-03 02:34:16,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:16,052 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:16,053 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:16,057 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:16,068 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:34:16,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:16,182 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-03 02:34:16,189 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:16,389 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:16,400 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:34:16,422 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:34:16,639 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:16,639 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:16,853 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:16,867 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:16,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1522641102] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:16,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [257027873] [2022-11-03 02:34:16,895 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-03 02:34:16,895 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:16,904 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:16,912 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:16,913 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:17,037 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:17,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:17,044 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:17,170 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:17,305 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:17,352 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:17,396 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:18,047 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '525#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_#t~nondet14#1| 127) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet14#1|)) (= |#NULL.base| 0))' at error location [2022-11-03 02:34:18,047 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:18,048 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:18,048 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-11-03 02:34:18,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1894468898] [2022-11-03 02:34:18,048 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:18,049 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-03 02:34:18,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:18,049 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-03 02:34:18,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-11-03 02:34:18,050 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:18,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:18,552 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-11-03 02:34:18,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-03 02:34:18,553 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-03 02:34:18,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:18,554 INFO L225 Difference]: With dead ends: 65 [2022-11-03 02:34:18,554 INFO L226 Difference]: Without dead ends: 65 [2022-11-03 02:34:18,554 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-11-03 02:34:18,555 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 142 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:18,555 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 112 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:34:18,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-03 02:34:18,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 34. [2022-11-03 02:34:18,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 20 states have (on average 1.95) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:18,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-11-03 02:34:18,560 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 6 [2022-11-03 02:34:18,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:18,560 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-11-03 02:34:18,560 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:18,561 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-11-03 02:34:18,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:34:18,567 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:18,567 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:18,627 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:18,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:18,780 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:18,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:18,780 INFO L85 PathProgramCache]: Analyzing trace with hash 414361537, now seen corresponding path program 1 times [2022-11-03 02:34:18,781 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:18,781 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [593266266] [2022-11-03 02:34:18,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:18,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:18,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:18,826 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:18,827 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:18,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [593266266] [2022-11-03 02:34:18,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [593266266] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:18,828 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:18,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:34:18,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [243331672] [2022-11-03 02:34:18,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:18,829 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:34:18,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:18,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:34:18,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:18,830 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:18,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:18,873 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-03 02:34:18,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:34:18,874 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:34:18,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:18,875 INFO L225 Difference]: With dead ends: 32 [2022-11-03 02:34:18,875 INFO L226 Difference]: Without dead ends: 32 [2022-11-03 02:34:18,875 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:18,876 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 28 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:18,877 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 17 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:34:18,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-03 02:34:18,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-11-03 02:34:18,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 20 states have (on average 1.85) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:18,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-11-03 02:34:18,882 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 7 [2022-11-03 02:34:18,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:18,882 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-11-03 02:34:18,882 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:18,883 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-11-03 02:34:18,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:34:18,883 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:18,883 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:18,884 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:34:18,884 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:18,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:18,885 INFO L85 PathProgramCache]: Analyzing trace with hash 414361538, now seen corresponding path program 1 times [2022-11-03 02:34:18,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:18,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2089351665] [2022-11-03 02:34:18,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:18,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:18,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:19,053 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:19,053 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:19,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2089351665] [2022-11-03 02:34:19,054 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2089351665] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:19,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [566760943] [2022-11-03 02:34:19,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:19,054 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:19,055 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:19,056 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:19,068 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:34:19,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:19,151 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-03 02:34:19,153 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:19,229 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:19,230 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:19,311 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:19,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [566760943] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:19,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1794730645] [2022-11-03 02:34:19,314 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-03 02:34:19,314 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:19,315 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:19,315 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:19,315 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:19,382 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:19,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:19,388 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:19,453 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:19,584 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:19,623 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:19,705 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:20,732 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '751#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-03 02:34:20,732 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:20,733 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:20,733 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 11 [2022-11-03 02:34:20,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [65328070] [2022-11-03 02:34:20,733 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:20,734 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-03 02:34:20,734 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:20,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-03 02:34:20,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=240, Unknown=0, NotChecked=0, Total=306 [2022-11-03 02:34:20,735 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:20,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:20,959 INFO L93 Difference]: Finished difference Result 60 states and 69 transitions. [2022-11-03 02:34:20,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:34:20,960 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:34:20,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:20,961 INFO L225 Difference]: With dead ends: 60 [2022-11-03 02:34:20,961 INFO L226 Difference]: Without dead ends: 60 [2022-11-03 02:34:20,962 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=105, Invalid=401, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:34:20,962 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 207 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 87 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:20,963 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 132 Invalid, 87 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:20,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-03 02:34:20,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 35. [2022-11-03 02:34:20,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:20,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-03 02:34:20,968 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-11-03 02:34:20,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:20,968 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-03 02:34:20,968 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:20,969 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-03 02:34:20,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-03 02:34:20,969 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:20,970 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:21,018 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:21,189 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-03 02:34:21,190 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:21,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:21,191 INFO L85 PathProgramCache]: Analyzing trace with hash 414364089, now seen corresponding path program 1 times [2022-11-03 02:34:21,191 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:21,191 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1367289589] [2022-11-03 02:34:21,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:21,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:21,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:21,417 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:21,417 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:21,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1367289589] [2022-11-03 02:34:21,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1367289589] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:21,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1133489279] [2022-11-03 02:34:21,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:21,418 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:21,418 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:21,420 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:21,435 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:34:21,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:21,519 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 02:34:21,524 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:21,638 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:21,639 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:34:21,639 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1133489279] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:21,639 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:34:21,639 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 7 [2022-11-03 02:34:21,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1945770137] [2022-11-03 02:34:21,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:21,640 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:34:21,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:21,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:34:21,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:34:21,641 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:21,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:21,733 INFO L93 Difference]: Finished difference Result 34 states and 40 transitions. [2022-11-03 02:34:21,733 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:21,734 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-03 02:34:21,734 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:21,734 INFO L225 Difference]: With dead ends: 34 [2022-11-03 02:34:21,734 INFO L226 Difference]: Without dead ends: 34 [2022-11-03 02:34:21,734 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-03 02:34:21,735 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 94 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:21,736 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 13 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:34:21,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-11-03 02:34:21,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-11-03 02:34:21,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 23 states have (on average 1.7391304347826086) internal successors, (40), 33 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:21,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 40 transitions. [2022-11-03 02:34:21,739 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 40 transitions. Word has length 7 [2022-11-03 02:34:21,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:21,739 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 40 transitions. [2022-11-03 02:34:21,739 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:21,739 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 40 transitions. [2022-11-03 02:34:21,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-03 02:34:21,740 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:21,740 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:21,786 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:21,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:21,950 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:21,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:21,950 INFO L85 PathProgramCache]: Analyzing trace with hash -39615125, now seen corresponding path program 1 times [2022-11-03 02:34:21,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:21,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1480841052] [2022-11-03 02:34:21,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:21,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:21,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:22,273 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:22,274 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:22,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1480841052] [2022-11-03 02:34:22,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1480841052] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:22,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [602706422] [2022-11-03 02:34:22,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:22,275 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:22,275 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:22,277 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:22,302 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-03 02:34:22,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:22,361 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-03 02:34:22,363 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:22,404 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:34:22,405 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:34:22,531 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:22,531 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:34:22,532 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [602706422] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:22,532 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:34:22,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 8 [2022-11-03 02:34:22,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1070395401] [2022-11-03 02:34:22,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:22,533 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:34:22,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:22,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:34:22,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-03 02:34:22,533 INFO L87 Difference]: Start difference. First operand 34 states and 40 transitions. Second operand has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:22,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:22,679 INFO L93 Difference]: Finished difference Result 59 states and 69 transitions. [2022-11-03 02:34:22,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:34:22,680 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-03 02:34:22,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:22,681 INFO L225 Difference]: With dead ends: 59 [2022-11-03 02:34:22,681 INFO L226 Difference]: Without dead ends: 59 [2022-11-03 02:34:22,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=42, Invalid=68, Unknown=0, NotChecked=0, Total=110 [2022-11-03 02:34:22,683 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 114 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 114 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:22,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [114 Valid, 42 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:22,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-11-03 02:34:22,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 37. [2022-11-03 02:34:22,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 26 states have (on average 1.6923076923076923) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:22,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-03 02:34:22,688 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 8 [2022-11-03 02:34:22,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:22,688 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-03 02:34:22,689 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:22,689 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-03 02:34:22,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-03 02:34:22,690 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:22,690 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1] [2022-11-03 02:34:22,735 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:22,904 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:22,904 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:22,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:22,905 INFO L85 PathProgramCache]: Analyzing trace with hash -1327018651, now seen corresponding path program 2 times [2022-11-03 02:34:22,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:22,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2086376374] [2022-11-03 02:34:22,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:22,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:22,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:23,283 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:23,283 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:23,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2086376374] [2022-11-03 02:34:23,284 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2086376374] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:23,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1217319971] [2022-11-03 02:34:23,284 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:34:23,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:23,285 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:23,286 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:23,288 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-03 02:34:23,367 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-11-03 02:34:23,368 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:34:23,369 INFO L263 TraceCheckSpWp]: Trace formula consists of 62 conjuncts, 14 conjunts are in the unsatisfiable core [2022-11-03 02:34:23,371 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:23,434 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:34:23,434 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:34:23,586 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:34:23,586 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:34:23,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1217319971] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:23,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:34:23,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 9 [2022-11-03 02:34:23,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695643734] [2022-11-03 02:34:23,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:23,591 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:34:23,592 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:23,593 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:34:23,593 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-11-03 02:34:23,593 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:23,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:23,731 INFO L93 Difference]: Finished difference Result 57 states and 67 transitions. [2022-11-03 02:34:23,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:34:23,732 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-03 02:34:23,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:23,732 INFO L225 Difference]: With dead ends: 57 [2022-11-03 02:34:23,733 INFO L226 Difference]: Without dead ends: 57 [2022-11-03 02:34:23,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:34:23,734 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 87 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:23,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 42 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:23,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-03 02:34:23,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 35. [2022-11-03 02:34:23,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 25 states have (on average 1.68) internal successors, (42), 34 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:23,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 42 transitions. [2022-11-03 02:34:23,737 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 42 transitions. Word has length 9 [2022-11-03 02:34:23,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:23,743 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 42 transitions. [2022-11-03 02:34:23,743 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:23,743 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 42 transitions. [2022-11-03 02:34:23,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-03 02:34:23,744 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:23,744 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:23,799 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:23,953 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:23,954 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:23,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:23,954 INFO L85 PathProgramCache]: Analyzing trace with hash 584631406, now seen corresponding path program 1 times [2022-11-03 02:34:23,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:23,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137780179] [2022-11-03 02:34:23,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:23,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:23,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:24,046 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:24,046 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:24,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137780179] [2022-11-03 02:34:24,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137780179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:24,047 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:24,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:34:24,047 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417591149] [2022-11-03 02:34:24,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:24,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:34:24,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:24,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:34:24,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:34:24,048 INFO L87 Difference]: Start difference. First operand 35 states and 42 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:24,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:24,115 INFO L93 Difference]: Finished difference Result 33 states and 40 transitions. [2022-11-03 02:34:24,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:24,116 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-03 02:34:24,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:24,117 INFO L225 Difference]: With dead ends: 33 [2022-11-03 02:34:24,117 INFO L226 Difference]: Without dead ends: 33 [2022-11-03 02:34:24,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:34:24,118 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 51 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:24,119 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 19 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:34:24,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-03 02:34:24,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 32. [2022-11-03 02:34:24,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 25 states have (on average 1.56) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:24,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 39 transitions. [2022-11-03 02:34:24,122 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 39 transitions. Word has length 10 [2022-11-03 02:34:24,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:24,122 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 39 transitions. [2022-11-03 02:34:24,123 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:24,123 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 39 transitions. [2022-11-03 02:34:24,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-03 02:34:24,124 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:24,124 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:24,124 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-03 02:34:24,124 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:24,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:24,125 INFO L85 PathProgramCache]: Analyzing trace with hash 584631407, now seen corresponding path program 1 times [2022-11-03 02:34:24,125 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:24,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1827961001] [2022-11-03 02:34:24,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:24,126 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:24,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:24,284 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:24,285 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:24,285 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1827961001] [2022-11-03 02:34:24,285 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1827961001] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:24,285 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1080889673] [2022-11-03 02:34:24,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:24,286 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:24,286 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:24,287 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:24,316 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-03 02:34:24,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:24,411 INFO L263 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-03 02:34:24,413 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:24,660 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:24,661 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:24,729 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-03 02:34:24,934 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:24,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1080889673] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:24,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1015188780] [2022-11-03 02:34:24,937 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-03 02:34:24,937 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:24,938 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:24,938 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:24,938 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:25,000 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:25,051 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:25,052 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:25,130 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:25,211 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:25,252 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:25,345 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:25,456 INFO L356 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-03 02:34:25,456 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-03 02:34:25,527 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:27,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1015188780] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:27,627 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:27,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 8, 8] total 25 [2022-11-03 02:34:27,628 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [929380652] [2022-11-03 02:34:27,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:27,629 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-03 02:34:27,629 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:27,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-03 02:34:27,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-03 02:34:27,630 INFO L87 Difference]: Start difference. First operand 32 states and 39 transitions. Second operand has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:27,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:27,900 INFO L93 Difference]: Finished difference Result 58 states and 69 transitions. [2022-11-03 02:34:27,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-03 02:34:27,901 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-03 02:34:27,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:27,901 INFO L225 Difference]: With dead ends: 58 [2022-11-03 02:34:27,901 INFO L226 Difference]: Without dead ends: 58 [2022-11-03 02:34:27,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-11-03 02:34:27,902 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 100 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:27,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 49 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:34:27,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-03 02:34:27,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 36. [2022-11-03 02:34:27,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 29 states have (on average 1.4827586206896552) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:27,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-03 02:34:27,906 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 10 [2022-11-03 02:34:27,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:27,907 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-03 02:34:27,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:27,907 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-03 02:34:27,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-03 02:34:27,908 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:27,908 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1] [2022-11-03 02:34:27,957 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:28,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-03 02:34:28,126 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:28,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:28,126 INFO L85 PathProgramCache]: Analyzing trace with hash 340436050, now seen corresponding path program 1 times [2022-11-03 02:34:28,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:28,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [456901070] [2022-11-03 02:34:28,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:28,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:28,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:28,289 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:28,289 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:28,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [456901070] [2022-11-03 02:34:28,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [456901070] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:28,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [792709880] [2022-11-03 02:34:28,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:28,290 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:28,290 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:28,292 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:28,313 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-03 02:34:28,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:28,390 INFO L263 TraceCheckSpWp]: Trace formula consists of 101 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-03 02:34:28,393 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:28,525 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:28,525 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:28,646 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:28,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [792709880] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:28,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [279686929] [2022-11-03 02:34:28,648 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-03 02:34:28,648 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:28,649 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:28,649 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:28,649 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:28,746 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:28,750 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:28,752 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:28,851 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:28,938 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:28,978 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:29,061 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:29,116 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:29,154 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:29,175 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:29,939 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1544#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:34:29,940 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:29,940 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:29,940 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-11-03 02:34:29,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205847260] [2022-11-03 02:34:29,940 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:29,941 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-03 02:34:29,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:29,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-03 02:34:29,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:34:29,942 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:30,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:30,252 INFO L93 Difference]: Finished difference Result 101 states and 117 transitions. [2022-11-03 02:34:30,253 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 02:34:30,253 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-03 02:34:30,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:30,254 INFO L225 Difference]: With dead ends: 101 [2022-11-03 02:34:30,255 INFO L226 Difference]: Without dead ends: 101 [2022-11-03 02:34:30,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=207, Invalid=785, Unknown=0, NotChecked=0, Total=992 [2022-11-03 02:34:30,256 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 347 mSDsluCounter, 289 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 347 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:30,262 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [347 Valid, 291 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:30,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-11-03 02:34:30,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 41. [2022-11-03 02:34:30,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 40 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:30,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 50 transitions. [2022-11-03 02:34:30,273 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 50 transitions. Word has length 11 [2022-11-03 02:34:30,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:30,274 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 50 transitions. [2022-11-03 02:34:30,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:30,274 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 50 transitions. [2022-11-03 02:34:30,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-03 02:34:30,276 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:30,276 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:30,318 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:30,497 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-03 02:34:30,498 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:30,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:30,498 INFO L85 PathProgramCache]: Analyzing trace with hash -809932952, now seen corresponding path program 1 times [2022-11-03 02:34:30,498 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:30,498 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1579568349] [2022-11-03 02:34:30,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:30,499 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:30,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:31,022 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:31,022 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:31,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1579568349] [2022-11-03 02:34:31,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1579568349] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:31,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [231690343] [2022-11-03 02:34:31,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:31,024 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:31,024 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:31,026 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:31,037 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-03 02:34:31,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:31,123 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-03 02:34:31,127 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:31,163 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:34:31,411 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:31,519 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:34:31,665 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:31,667 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:31,668 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-11-03 02:34:31,697 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:31,698 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:31,871 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:31,871 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-11-03 02:34:31,895 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:31,895 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 32 [2022-11-03 02:34:31,913 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:34:32,186 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:34:32,203 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:32,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [231690343] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:32,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [615554444] [2022-11-03 02:34:32,213 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-03 02:34:32,213 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:32,213 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:32,214 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:32,214 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:32,283 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:32,287 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:32,288 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:32,361 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:32,443 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:32,479 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:32,577 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:32,654 INFO L356 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-03 02:34:32,656 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-03 02:34:32,961 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:36,178 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1802#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-03 02:34:36,178 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:36,178 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:36,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 26 [2022-11-03 02:34:36,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964297772] [2022-11-03 02:34:36,179 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:36,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-03 02:34:36,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:36,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-03 02:34:36,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=1068, Unknown=0, NotChecked=0, Total=1190 [2022-11-03 02:34:36,181 INFO L87 Difference]: Start difference. First operand 41 states and 50 transitions. Second operand has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:37,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:37,355 INFO L93 Difference]: Finished difference Result 74 states and 85 transitions. [2022-11-03 02:34:37,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-03 02:34:37,356 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-03 02:34:37,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:37,356 INFO L225 Difference]: With dead ends: 74 [2022-11-03 02:34:37,356 INFO L226 Difference]: Without dead ends: 74 [2022-11-03 02:34:37,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 486 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=232, Invalid=2024, Unknown=0, NotChecked=0, Total=2256 [2022-11-03 02:34:37,358 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 76 mSDsluCounter, 270 mSDsCounter, 0 mSdLazyCounter, 417 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 253 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 417 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 69 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:37,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 253 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 417 Invalid, 0 Unknown, 69 Unchecked, 0.4s Time] [2022-11-03 02:34:37,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-11-03 02:34:37,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 59. [2022-11-03 02:34:37,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 52 states have (on average 1.4807692307692308) internal successors, (77), 58 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:37,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-11-03 02:34:37,362 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 12 [2022-11-03 02:34:37,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:37,363 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-11-03 02:34:37,363 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:37,363 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-11-03 02:34:37,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:34:37,364 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:37,364 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1] [2022-11-03 02:34:37,409 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:37,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-03 02:34:37,565 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:37,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:37,565 INFO L85 PathProgramCache]: Analyzing trace with hash -1868709771, now seen corresponding path program 2 times [2022-11-03 02:34:37,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:37,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9925389] [2022-11-03 02:34:37,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:37,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:37,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:37,852 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:34:37,852 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:37,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9925389] [2022-11-03 02:34:37,853 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9925389] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:37,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [442620456] [2022-11-03 02:34:37,853 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:34:37,853 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:37,853 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:37,858 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:37,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-03 02:34:37,966 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-03 02:34:37,967 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:34:37,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 88 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-03 02:34:37,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:38,033 INFO L356 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-03 02:34:38,033 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:34:38,301 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:34:38,301 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:38,570 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:34:38,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [442620456] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:38,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1692800928] [2022-11-03 02:34:38,573 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-11-03 02:34:38,574 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:38,574 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:38,574 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:38,574 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:38,626 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:38,631 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:38,633 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:38,687 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:38,757 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:38,785 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:38,880 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:38,944 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:38,991 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:39,030 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:39,047 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:39,866 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2059#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:34:39,866 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:39,866 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:39,866 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-11-03 02:34:39,866 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1257961427] [2022-11-03 02:34:39,867 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:39,867 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-03 02:34:39,867 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:39,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-03 02:34:39,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=399, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:34:39,868 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:40,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:40,341 INFO L93 Difference]: Finished difference Result 122 states and 164 transitions. [2022-11-03 02:34:40,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-03 02:34:40,342 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:34:40,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:40,343 INFO L225 Difference]: With dead ends: 122 [2022-11-03 02:34:40,343 INFO L226 Difference]: Without dead ends: 122 [2022-11-03 02:34:40,344 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=194, Invalid=618, Unknown=0, NotChecked=0, Total=812 [2022-11-03 02:34:40,344 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 315 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:40,345 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [315 Valid, 97 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:34:40,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2022-11-03 02:34:40,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 57. [2022-11-03 02:34:40,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 56 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:40,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 75 transitions. [2022-11-03 02:34:40,348 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 75 transitions. Word has length 13 [2022-11-03 02:34:40,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:40,349 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 75 transitions. [2022-11-03 02:34:40,349 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:40,349 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 75 transitions. [2022-11-03 02:34:40,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:34:40,350 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:40,350 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:40,393 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:40,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-03 02:34:40,551 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:40,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:40,551 INFO L85 PathProgramCache]: Analyzing trace with hash 661880773, now seen corresponding path program 1 times [2022-11-03 02:34:40,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:40,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142983610] [2022-11-03 02:34:40,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:40,552 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:40,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:40,620 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:40,620 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:40,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142983610] [2022-11-03 02:34:40,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142983610] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:40,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:40,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-03 02:34:40,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525330409] [2022-11-03 02:34:40,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:40,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:34:40,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:40,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:34:40,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-03 02:34:40,623 INFO L87 Difference]: Start difference. First operand 57 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:40,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:40,692 INFO L93 Difference]: Finished difference Result 57 states and 73 transitions. [2022-11-03 02:34:40,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:40,693 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:34:40,693 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:40,694 INFO L225 Difference]: With dead ends: 57 [2022-11-03 02:34:40,694 INFO L226 Difference]: Without dead ends: 57 [2022-11-03 02:34:40,694 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-03 02:34:40,695 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 32 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:40,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 28 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:34:40,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-03 02:34:40,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-11-03 02:34:40,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.411764705882353) internal successors, (72), 55 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:40,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-11-03 02:34:40,699 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 13 [2022-11-03 02:34:40,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:40,699 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-11-03 02:34:40,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:40,699 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-11-03 02:34:40,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-03 02:34:40,700 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:40,700 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:40,700 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-03 02:34:40,701 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:40,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:40,701 INFO L85 PathProgramCache]: Analyzing trace with hash 661880774, now seen corresponding path program 1 times [2022-11-03 02:34:40,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:40,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263556635] [2022-11-03 02:34:40,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:40,702 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:40,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:40,904 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:40,905 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:40,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263556635] [2022-11-03 02:34:40,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263556635] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:40,905 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:40,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-03 02:34:40,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82474205] [2022-11-03 02:34:40,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:40,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:34:40,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:40,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:34:40,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:34:40,907 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:41,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:41,020 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2022-11-03 02:34:41,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:34:41,021 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-03 02:34:41,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:41,023 INFO L225 Difference]: With dead ends: 65 [2022-11-03 02:34:41,023 INFO L226 Difference]: Without dead ends: 65 [2022-11-03 02:34:41,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-11-03 02:34:41,024 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 56 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:41,025 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 23 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:34:41,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-11-03 02:34:41,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 60. [2022-11-03 02:34:41,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 55 states have (on average 1.3636363636363635) internal successors, (75), 59 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:41,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 75 transitions. [2022-11-03 02:34:41,029 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 75 transitions. Word has length 13 [2022-11-03 02:34:41,029 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:41,029 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 75 transitions. [2022-11-03 02:34:41,030 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:41,030 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 75 transitions. [2022-11-03 02:34:41,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-03 02:34:41,030 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:41,031 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:41,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-03 02:34:41,031 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:41,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:41,032 INFO L85 PathProgramCache]: Analyzing trace with hash 2003282293, now seen corresponding path program 1 times [2022-11-03 02:34:41,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:41,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1331051936] [2022-11-03 02:34:41,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:41,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:41,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:41,320 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:41,321 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:41,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1331051936] [2022-11-03 02:34:41,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1331051936] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:41,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1792878937] [2022-11-03 02:34:41,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:41,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:41,322 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:41,326 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:41,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-03 02:34:41,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:41,434 INFO L263 TraceCheckSpWp]: Trace formula consists of 148 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-03 02:34:41,436 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:41,601 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 02:34:41,602 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:34:41,602 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1792878937] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:41,602 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:34:41,602 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 11 [2022-11-03 02:34:41,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [853070410] [2022-11-03 02:34:41,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:41,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-03 02:34:41,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:41,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-03 02:34:41,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:34:41,604 INFO L87 Difference]: Start difference. First operand 60 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:41,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:41,612 INFO L93 Difference]: Finished difference Result 62 states and 76 transitions. [2022-11-03 02:34:41,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-03 02:34:41,613 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-03 02:34:41,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:41,614 INFO L225 Difference]: With dead ends: 62 [2022-11-03 02:34:41,614 INFO L226 Difference]: Without dead ends: 60 [2022-11-03 02:34:41,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-11-03 02:34:41,615 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 1 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 21 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:41,616 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 56 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 21 Unchecked, 0.0s Time] [2022-11-03 02:34:41,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-03 02:34:41,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 56. [2022-11-03 02:34:41,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.3529411764705883) internal successors, (69), 55 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:41,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 69 transitions. [2022-11-03 02:34:41,619 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 69 transitions. Word has length 15 [2022-11-03 02:34:41,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:41,620 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 69 transitions. [2022-11-03 02:34:41,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:41,620 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 69 transitions. [2022-11-03 02:34:41,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-03 02:34:41,621 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:41,621 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:41,667 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:41,849 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:41,850 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:41,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:41,850 INFO L85 PathProgramCache]: Analyzing trace with hash -1835762402, now seen corresponding path program 2 times [2022-11-03 02:34:41,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:41,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1876040723] [2022-11-03 02:34:41,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:41,850 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:41,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:42,445 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:42,445 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:42,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1876040723] [2022-11-03 02:34:42,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1876040723] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:42,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [479108495] [2022-11-03 02:34:42,446 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:34:42,446 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:42,446 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:42,447 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:42,473 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-03 02:34:42,566 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:34:42,566 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:34:42,568 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-03 02:34:42,571 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:42,608 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:34:42,705 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:42,775 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:34:43,043 INFO L356 Elim1Store]: treesize reduction 4, result has 81.0 percent of original size [2022-11-03 02:34:43,044 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 31 treesize of output 27 [2022-11-03 02:34:43,133 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 1 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:34:43,134 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:43,540 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-03 02:34:43,555 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:43,556 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-03 02:34:43,578 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:43,578 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 61 treesize of output 61 [2022-11-03 02:34:43,584 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 15 [2022-11-03 02:34:43,835 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:34:43,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [479108495] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:43,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1460885923] [2022-11-03 02:34:43,837 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-11-03 02:34:43,837 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:43,838 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:43,838 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:43,838 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:43,887 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:43,893 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:43,894 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:43,949 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:44,002 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:44,035 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:44,098 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:44,160 INFO L356 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-03 02:34:44,161 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-03 02:34:44,391 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:47,161 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2804#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-11-03 02:34:47,161 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:34:47,162 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:47,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 26 [2022-11-03 02:34:47,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [899780013] [2022-11-03 02:34:47,162 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:34:47,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-03 02:34:47,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:47,163 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-03 02:34:47,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=1141, Unknown=0, NotChecked=0, Total=1260 [2022-11-03 02:34:47,164 INFO L87 Difference]: Start difference. First operand 56 states and 69 transitions. Second operand has 27 states, 26 states have (on average 1.5769230769230769) internal successors, (41), 27 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:48,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:48,556 INFO L93 Difference]: Finished difference Result 57 states and 70 transitions. [2022-11-03 02:34:48,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-03 02:34:48,556 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 1.5769230769230769) internal successors, (41), 27 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-03 02:34:48,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:48,557 INFO L225 Difference]: With dead ends: 57 [2022-11-03 02:34:48,557 INFO L226 Difference]: Without dead ends: 57 [2022-11-03 02:34:48,558 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 440 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=262, Invalid=2288, Unknown=0, NotChecked=0, Total=2550 [2022-11-03 02:34:48,559 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 34 mSDsluCounter, 130 mSDsCounter, 0 mSdLazyCounter, 321 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 405 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 321 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 74 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:48,560 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 115 Invalid, 405 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 321 Invalid, 0 Unknown, 74 Unchecked, 0.3s Time] [2022-11-03 02:34:48,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-03 02:34:48,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 54. [2022-11-03 02:34:48,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.32) internal successors, (66), 53 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:48,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 66 transitions. [2022-11-03 02:34:48,563 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 66 transitions. Word has length 16 [2022-11-03 02:34:48,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:48,563 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 66 transitions. [2022-11-03 02:34:48,563 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 1.5769230769230769) internal successors, (41), 27 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:48,564 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 66 transitions. [2022-11-03 02:34:48,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:34:48,564 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:48,564 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:48,607 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:48,777 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:48,778 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:48,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:48,778 INFO L85 PathProgramCache]: Analyzing trace with hash -1818758752, now seen corresponding path program 1 times [2022-11-03 02:34:48,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:48,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1088295527] [2022-11-03 02:34:48,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:48,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:48,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:48,937 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:48,937 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:48,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1088295527] [2022-11-03 02:34:48,937 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1088295527] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:48,938 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:48,938 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:34:48,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997378037] [2022-11-03 02:34:48,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:48,939 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-03 02:34:48,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:48,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-03 02:34:48,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:34:48,940 INFO L87 Difference]: Start difference. First operand 54 states and 66 transitions. Second operand has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:48,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:48,976 INFO L93 Difference]: Finished difference Result 53 states and 65 transitions. [2022-11-03 02:34:48,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-03 02:34:48,976 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-03 02:34:48,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:48,977 INFO L225 Difference]: With dead ends: 53 [2022-11-03 02:34:48,977 INFO L226 Difference]: Without dead ends: 50 [2022-11-03 02:34:48,977 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-03 02:34:48,978 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 9 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:48,979 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 24 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:34:48,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-03 02:34:48,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2022-11-03 02:34:48,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 47 states have (on average 1.2553191489361701) internal successors, (59), 49 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:48,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 59 transitions. [2022-11-03 02:34:48,981 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 59 transitions. Word has length 18 [2022-11-03 02:34:48,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:48,982 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 59 transitions. [2022-11-03 02:34:48,982 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:48,982 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 59 transitions. [2022-11-03 02:34:48,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-03 02:34:48,983 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:48,983 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:48,983 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-11-03 02:34:48,983 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:48,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:48,984 INFO L85 PathProgramCache]: Analyzing trace with hash -1817780669, now seen corresponding path program 1 times [2022-11-03 02:34:48,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:48,984 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154127711] [2022-11-03 02:34:48,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:48,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:49,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:49,261 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:49,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:49,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [154127711] [2022-11-03 02:34:49,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [154127711] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:49,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [977806543] [2022-11-03 02:34:49,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:49,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:49,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:49,266 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:49,285 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-03 02:34:49,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:49,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-03 02:34:49,379 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:49,415 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:49,628 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:49,629 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-11-03 02:34:49,773 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:49,773 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:50,115 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-03 02:34:50,123 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-03 02:34:50,129 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-11-03 02:34:50,157 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:34:50,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [977806543] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:50,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [404263275] [2022-11-03 02:34:50,161 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-11-03 02:34:50,161 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:50,162 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:50,162 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:50,162 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:50,220 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:50,224 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:50,225 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:50,270 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:50,360 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:50,388 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:50,466 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:50,532 INFO L356 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-03 02:34:50,532 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-03 02:34:50,721 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,724 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,725 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,726 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,761 INFO L356 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-11-03 02:34:50,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-11-03 02:34:50,866 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,869 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,870 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,872 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:50,904 INFO L356 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-11-03 02:34:50,904 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-11-03 02:34:50,969 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:34:55,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [404263275] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:55,380 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:34:55,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [8, 8, 8] total 34 [2022-11-03 02:34:55,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [787963085] [2022-11-03 02:34:55,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:55,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:34:55,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:55,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:34:55,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-11-03 02:34:55,382 INFO L87 Difference]: Start difference. First operand 50 states and 59 transitions. Second operand has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:55,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:55,674 INFO L93 Difference]: Finished difference Result 81 states and 93 transitions. [2022-11-03 02:34:55,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:34:55,675 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-03 02:34:55,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:55,675 INFO L225 Difference]: With dead ends: 81 [2022-11-03 02:34:55,675 INFO L226 Difference]: Without dead ends: 71 [2022-11-03 02:34:55,676 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 25 SyntacticMatches, 3 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 249 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-11-03 02:34:55,676 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 48 mSDsluCounter, 61 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 157 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:55,676 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 59 Invalid, 157 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:34:55,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-03 02:34:55,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 50. [2022-11-03 02:34:55,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 47 states have (on average 1.2553191489361701) internal successors, (59), 49 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:55,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 59 transitions. [2022-11-03 02:34:55,679 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 59 transitions. Word has length 18 [2022-11-03 02:34:55,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:55,680 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 59 transitions. [2022-11-03 02:34:55,680 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:55,680 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 59 transitions. [2022-11-03 02:34:55,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-03 02:34:55,681 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:55,681 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:55,708 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:55,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-11-03 02:34:55,890 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:55,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:55,890 INFO L85 PathProgramCache]: Analyzing trace with hash 197018185, now seen corresponding path program 1 times [2022-11-03 02:34:55,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:55,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1045109303] [2022-11-03 02:34:55,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:55,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:55,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:55,951 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:34:55,951 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:55,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1045109303] [2022-11-03 02:34:55,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1045109303] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:55,952 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:34:55,952 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:34:55,952 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489069452] [2022-11-03 02:34:55,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:55,953 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:34:55,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:55,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:34:55,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:55,954 INFO L87 Difference]: Start difference. First operand 50 states and 59 transitions. Second operand has 3 states, 2 states have (on average 8.0) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:55,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:55,992 INFO L93 Difference]: Finished difference Result 52 states and 61 transitions. [2022-11-03 02:34:55,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:34:55,993 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 8.0) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-03 02:34:55,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:55,993 INFO L225 Difference]: With dead ends: 52 [2022-11-03 02:34:55,993 INFO L226 Difference]: Without dead ends: 52 [2022-11-03 02:34:55,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:34:55,994 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:55,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 18 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-03 02:34:55,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2022-11-03 02:34:55,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 46. [2022-11-03 02:34:55,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.255813953488372) internal successors, (54), 45 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:55,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 54 transitions. [2022-11-03 02:34:55,998 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 54 transitions. Word has length 20 [2022-11-03 02:34:55,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:55,998 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 54 transitions. [2022-11-03 02:34:55,998 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 8.0) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:55,999 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 54 transitions. [2022-11-03 02:34:55,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-03 02:34:55,999 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:56,000 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:56,000 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-11-03 02:34:56,000 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:56,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:56,001 INFO L85 PathProgramCache]: Analyzing trace with hash 418238716, now seen corresponding path program 1 times [2022-11-03 02:34:56,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:56,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106077767] [2022-11-03 02:34:56,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:56,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:56,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:56,641 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:34:56,642 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:56,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106077767] [2022-11-03 02:34:56,642 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106077767] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:56,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1687391250] [2022-11-03 02:34:56,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:56,642 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:56,643 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:56,646 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:56,665 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-03 02:34:56,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:56,776 INFO L263 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-03 02:34:56,784 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:56,880 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:57,155 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:57,159 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:34:57,160 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:34:57,195 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:34:57,196 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-03 02:34:57,196 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1687391250] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:34:57,196 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-03 02:34:57,196 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 19 [2022-11-03 02:34:57,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808352874] [2022-11-03 02:34:57,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:34:57,197 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-03 02:34:57,197 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:34:57,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-03 02:34:57,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2022-11-03 02:34:57,198 INFO L87 Difference]: Start difference. First operand 46 states and 54 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:57,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:34:57,290 INFO L93 Difference]: Finished difference Result 53 states and 61 transitions. [2022-11-03 02:34:57,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-03 02:34:57,291 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-11-03 02:34:57,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:34:57,291 INFO L225 Difference]: With dead ends: 53 [2022-11-03 02:34:57,291 INFO L226 Difference]: Without dead ends: 42 [2022-11-03 02:34:57,292 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-11-03 02:34:57,292 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 14 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 43 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:34:57,293 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 81 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 38 Invalid, 0 Unknown, 43 Unchecked, 0.0s Time] [2022-11-03 02:34:57,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2022-11-03 02:34:57,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 41. [2022-11-03 02:34:57,294 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 38 states have (on average 1.236842105263158) internal successors, (47), 40 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:57,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 47 transitions. [2022-11-03 02:34:57,295 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 47 transitions. Word has length 21 [2022-11-03 02:34:57,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:34:57,295 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 47 transitions. [2022-11-03 02:34:57,295 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:34:57,295 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 47 transitions. [2022-11-03 02:34:57,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-03 02:34:57,296 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:34:57,296 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:34:57,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-03 02:34:57,505 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-11-03 02:34:57,506 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:34:57,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:34:57,506 INFO L85 PathProgramCache]: Analyzing trace with hash 1986422707, now seen corresponding path program 1 times [2022-11-03 02:34:57,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:34:57,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42379820] [2022-11-03 02:34:57,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:57,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:34:57,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:57,938 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:34:57,938 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:34:57,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42379820] [2022-11-03 02:34:57,938 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42379820] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:34:57,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1591459920] [2022-11-03 02:34:57,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:34:57,939 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:34:57,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:34:57,940 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:34:57,969 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-03 02:34:58,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:34:58,086 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-03 02:34:58,088 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:34:58,211 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:34:58,211 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:34:58,386 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:34:58,420 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:34:58,420 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1591459920] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:34:58,421 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [283137607] [2022-11-03 02:34:58,424 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:34:58,425 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:34:58,426 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:34:58,426 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:34:58,426 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:34:58,490 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:58,494 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:34:58,495 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:34:58,537 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:34:58,604 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,632 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,714 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,767 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,799 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:34:58,860 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:34:58,947 INFO L356 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-11-03 02:34:58,947 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-11-03 02:34:59,213 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:59,217 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:59,219 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:34:59,306 INFO L356 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-11-03 02:34:59,306 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-11-03 02:34:59,582 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:34:59,582 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:34:59,794 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:34:59,794 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:34:59,919 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:04,814 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3753#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:04,814 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:04,814 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:04,814 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 20 [2022-11-03 02:35:04,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247252528] [2022-11-03 02:35:04,814 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:04,815 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-03 02:35:04,815 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:04,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-03 02:35:04,816 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=162, Invalid=1170, Unknown=0, NotChecked=0, Total=1332 [2022-11-03 02:35:04,816 INFO L87 Difference]: Start difference. First operand 41 states and 47 transitions. Second operand has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:05,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:05,301 INFO L93 Difference]: Finished difference Result 52 states and 57 transitions. [2022-11-03 02:35:05,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-03 02:35:05,301 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-03 02:35:05,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:05,302 INFO L225 Difference]: With dead ends: 52 [2022-11-03 02:35:05,302 INFO L226 Difference]: Without dead ends: 52 [2022-11-03 02:35:05,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 515 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=254, Invalid=1638, Unknown=0, NotChecked=0, Total=1892 [2022-11-03 02:35:05,303 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 149 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 50 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:05,304 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 50 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:35:05,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2022-11-03 02:35:05,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 46. [2022-11-03 02:35:05,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.2093023255813953) internal successors, (52), 45 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:05,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 52 transitions. [2022-11-03 02:35:05,306 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 52 transitions. Word has length 22 [2022-11-03 02:35:05,306 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:05,306 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 52 transitions. [2022-11-03 02:35:05,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:05,307 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 52 transitions. [2022-11-03 02:35:05,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-03 02:35:05,307 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:05,307 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:05,354 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:05,507 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-03 02:35:05,508 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:35:05,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:05,508 INFO L85 PathProgramCache]: Analyzing trace with hash 1397566569, now seen corresponding path program 1 times [2022-11-03 02:35:05,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:05,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826161605] [2022-11-03 02:35:05,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:05,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:05,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:06,034 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:06,034 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:06,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826161605] [2022-11-03 02:35:06,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1826161605] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:06,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [961833561] [2022-11-03 02:35:06,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:06,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:06,035 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:06,036 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:06,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-03 02:35:06,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:06,179 INFO L263 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-03 02:35:06,181 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:06,240 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:06,241 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:35:06,245 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:35:06,581 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:06,581 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:06,929 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:06,969 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:06,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [961833561] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:06,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1341304169] [2022-11-03 02:35:06,971 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:35:06,971 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:06,972 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:06,972 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:06,972 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:07,020 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:07,024 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:07,025 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:07,067 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:07,116 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:07,148 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:07,232 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:35:07,233 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:35:07,318 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:07,344 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:07,497 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:35:07,498 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:35:07,737 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:35:07,738 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:35:08,587 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:08,603 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:08,737 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:08,737 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:08,848 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:08,875 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:13,956 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4042#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:13,956 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:13,956 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:13,956 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 28 [2022-11-03 02:35:13,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662766148] [2022-11-03 02:35:13,957 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:13,957 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-03 02:35:13,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:13,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-03 02:35:13,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=1707, Unknown=0, NotChecked=0, Total=1892 [2022-11-03 02:35:13,959 INFO L87 Difference]: Start difference. First operand 46 states and 52 transitions. Second operand has 29 states, 28 states have (on average 2.4642857142857144) internal successors, (69), 29 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:14,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:14,618 INFO L93 Difference]: Finished difference Result 69 states and 78 transitions. [2022-11-03 02:35:14,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-03 02:35:14,619 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 2.4642857142857144) internal successors, (69), 29 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-03 02:35:14,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:14,619 INFO L225 Difference]: With dead ends: 69 [2022-11-03 02:35:14,620 INFO L226 Difference]: Without dead ends: 68 [2022-11-03 02:35:14,621 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 35 SyntacticMatches, 1 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 624 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=338, Invalid=2314, Unknown=0, NotChecked=0, Total=2652 [2022-11-03 02:35:14,621 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 352 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 86 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 352 SdHoareTripleChecker+Valid, 50 SdHoareTripleChecker+Invalid, 280 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:14,622 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [352 Valid, 50 Invalid, 280 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-03 02:35:14,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-03 02:35:14,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 60. [2022-11-03 02:35:14,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 57 states have (on average 1.1929824561403508) internal successors, (68), 59 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:14,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 68 transitions. [2022-11-03 02:35:14,624 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 68 transitions. Word has length 23 [2022-11-03 02:35:14,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:14,625 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 68 transitions. [2022-11-03 02:35:14,625 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 2.4642857142857144) internal successors, (69), 29 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:14,625 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 68 transitions. [2022-11-03 02:35:14,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-03 02:35:14,626 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:14,626 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:14,655 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:14,837 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-03 02:35:14,838 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:35:14,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:14,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1315246704, now seen corresponding path program 2 times [2022-11-03 02:35:14,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:14,838 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833901464] [2022-11-03 02:35:14,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:14,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:14,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:15,585 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 6 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:15,585 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:15,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833901464] [2022-11-03 02:35:15,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833901464] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:15,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [479304642] [2022-11-03 02:35:15,586 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:35:15,586 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:15,586 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:15,590 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:15,618 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-03 02:35:15,763 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:35:15,763 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:35:15,766 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 67 conjunts are in the unsatisfiable core [2022-11-03 02:35:15,769 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:15,786 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:35:15,987 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:35:16,060 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 27 [2022-11-03 02:35:16,750 INFO L356 Elim1Store]: treesize reduction 9, result has 52.6 percent of original size [2022-11-03 02:35:16,751 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 2 case distinctions, treesize of input 41 treesize of output 23 [2022-11-03 02:35:16,794 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:16,794 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:17,213 INFO L356 Elim1Store]: treesize reduction 23, result has 52.1 percent of original size [2022-11-03 02:35:17,213 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 75 treesize of output 79 [2022-11-03 02:35:17,227 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:17,228 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 39 [2022-11-03 02:35:17,237 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:35:17,258 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:17,271 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:17,272 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 42 treesize of output 51 [2022-11-03 02:35:17,651 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:17,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [479304642] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:17,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [51709858] [2022-11-03 02:35:17,656 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:35:17,656 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:17,657 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:17,657 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:17,657 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:17,717 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:17,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:17,722 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:17,766 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:17,810 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:17,846 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:17,905 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:35:17,958 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:17,987 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:18,106 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:35:18,106 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:35:18,313 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:35:18,313 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:35:19,104 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:19,138 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:19,240 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:19,241 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:19,324 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:19,344 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:24,806 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4382#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:24,807 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:24,807 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:24,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 14, 14] total 35 [2022-11-03 02:35:24,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503714266] [2022-11-03 02:35:24,807 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:24,808 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-03 02:35:24,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:24,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-03 02:35:24,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=183, Invalid=2367, Unknown=0, NotChecked=0, Total=2550 [2022-11-03 02:35:24,810 INFO L87 Difference]: Start difference. First operand 60 states and 68 transitions. Second operand has 36 states, 36 states have (on average 1.8611111111111112) internal successors, (67), 35 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:25,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:25,642 INFO L93 Difference]: Finished difference Result 68 states and 77 transitions. [2022-11-03 02:35:25,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:35:25,643 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.8611111111111112) internal successors, (67), 35 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-03 02:35:25,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:25,644 INFO L225 Difference]: With dead ends: 68 [2022-11-03 02:35:25,644 INFO L226 Difference]: Without dead ends: 68 [2022-11-03 02:35:25,646 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 35 SyntacticMatches, 1 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 903 ImplicationChecksByTransitivity, 7.3s TimeCoverageRelationStatistics Valid=284, Invalid=3498, Unknown=0, NotChecked=0, Total=3782 [2022-11-03 02:35:25,646 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 43 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 59 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:25,647 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 122 Invalid, 273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 202 Invalid, 0 Unknown, 59 Unchecked, 0.2s Time] [2022-11-03 02:35:25,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-11-03 02:35:25,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 67. [2022-11-03 02:35:25,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 64 states have (on average 1.1875) internal successors, (76), 66 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:25,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 76 transitions. [2022-11-03 02:35:25,650 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 76 transitions. Word has length 25 [2022-11-03 02:35:25,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:25,651 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 76 transitions. [2022-11-03 02:35:25,651 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.8611111111111112) internal successors, (67), 35 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:25,651 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 76 transitions. [2022-11-03 02:35:25,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 02:35:25,652 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:25,652 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:25,690 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:25,873 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-03 02:35:25,874 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:35:25,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:25,874 INFO L85 PathProgramCache]: Analyzing trace with hash -380858253, now seen corresponding path program 3 times [2022-11-03 02:35:25,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:25,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605569877] [2022-11-03 02:35:25,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:25,875 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:25,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:26,520 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:35:26,520 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:26,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605569877] [2022-11-03 02:35:26,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605569877] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:26,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [720171101] [2022-11-03 02:35:26,521 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:35:26,521 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:26,521 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:26,522 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:26,525 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-03 02:35:26,700 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:35:26,701 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:35:26,704 INFO L263 TraceCheckSpWp]: Trace formula consists of 220 conjuncts, 69 conjunts are in the unsatisfiable core [2022-11-03 02:35:26,711 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:26,762 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:35:26,763 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:35:26,782 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:35:27,379 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-03 02:35:27,509 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 25 [2022-11-03 02:35:28,035 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:28,035 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 21 [2022-11-03 02:35:28,338 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:35:28,339 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:28,787 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:28,788 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-11-03 02:35:28,803 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:28,804 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-11-03 02:35:28,815 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:35:29,520 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:29,528 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:29,530 WARN L234 Elim1Store]: Array PQE input equivalent to true [2022-11-03 02:35:29,531 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:35:29,532 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [720171101] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:29,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [684282929] [2022-11-03 02:35:29,534 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:35:29,534 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:29,534 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:29,535 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:29,535 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:29,573 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:29,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:29,577 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:29,620 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:29,671 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:29,698 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:29,760 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:35:29,814 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:29,845 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:29,982 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:35:29,982 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:35:30,172 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:35:30,172 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:35:31,074 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:31,102 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:31,213 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:31,213 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:31,326 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:31,350 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:37,277 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4756#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:37,278 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:37,278 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:37,278 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 17, 16] total 45 [2022-11-03 02:35:37,278 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403596855] [2022-11-03 02:35:37,278 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:37,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-03 02:35:37,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:37,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-03 02:35:37,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=3356, Unknown=4, NotChecked=0, Total=3660 [2022-11-03 02:35:37,281 INFO L87 Difference]: Start difference. First operand 67 states and 76 transitions. Second operand has 46 states, 45 states have (on average 1.7777777777777777) internal successors, (80), 46 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:39,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:39,606 INFO L93 Difference]: Finished difference Result 150 states and 169 transitions. [2022-11-03 02:35:39,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-03 02:35:39,607 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 45 states have (on average 1.7777777777777777) internal successors, (80), 46 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-03 02:35:39,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:39,608 INFO L225 Difference]: With dead ends: 150 [2022-11-03 02:35:39,608 INFO L226 Difference]: Without dead ends: 148 [2022-11-03 02:35:39,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 39 SyntacticMatches, 1 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2142 ImplicationChecksByTransitivity, 9.6s TimeCoverageRelationStatistics Valid=622, Invalid=6856, Unknown=4, NotChecked=0, Total=7482 [2022-11-03 02:35:39,611 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 120 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 701 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 877 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 701 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 135 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:39,611 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 281 Invalid, 877 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 701 Invalid, 0 Unknown, 135 Unchecked, 0.5s Time] [2022-11-03 02:35:39,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148 states. [2022-11-03 02:35:39,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148 to 69. [2022-11-03 02:35:39,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 66 states have (on average 1.196969696969697) internal successors, (79), 68 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:39,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 79 transitions. [2022-11-03 02:35:39,615 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 79 transitions. Word has length 27 [2022-11-03 02:35:39,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:39,615 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 79 transitions. [2022-11-03 02:35:39,615 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 45 states have (on average 1.7777777777777777) internal successors, (80), 46 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:39,615 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 79 transitions. [2022-11-03 02:35:39,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-11-03 02:35:39,616 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:39,616 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:39,645 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:39,825 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-03 02:35:39,826 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:35:39,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:39,826 INFO L85 PathProgramCache]: Analyzing trace with hash -1881611658, now seen corresponding path program 2 times [2022-11-03 02:35:39,826 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:39,826 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2054211477] [2022-11-03 02:35:39,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:39,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:39,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:40,158 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 7 proven. 5 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:35:40,158 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:40,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2054211477] [2022-11-03 02:35:40,159 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2054211477] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:40,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1594007812] [2022-11-03 02:35:40,169 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:35:40,169 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:40,169 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:40,170 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:40,178 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-03 02:35:40,685 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:35:40,686 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:35:40,688 INFO L263 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 57 conjunts are in the unsatisfiable core [2022-11-03 02:35:40,691 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:40,711 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:35:40,908 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:41,146 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:35:41,296 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:41,300 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:41,300 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:35:41,330 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:35:41,330 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:41,402 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_602 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_602) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-03 02:35:41,457 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_602 (Array Int Int)) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43| Int)) (or (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_602) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43| 1)) 0) (not (<= |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43| |c_ULTIMATE.start_cstrncat_~s~0#1.offset|)) (not (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43|)))) is different from false [2022-11-03 02:35:41,494 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_602 (Array Int Int)) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43| Int)) (or (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_602) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43| 1))) (< |c_ULTIMATE.start_cstrncat_~src#1.offset| |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43|) (not (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_43|)))) is different from false [2022-11-03 02:35:41,509 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:41,509 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:35:41,517 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:41,518 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-11-03 02:35:41,523 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:41,987 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:35:42,007 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-03 02:35:42,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1594007812] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:42,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1901656107] [2022-11-03 02:35:42,011 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:35:42,011 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:42,012 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:42,012 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:42,012 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:42,073 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:42,077 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:42,079 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:42,124 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:42,172 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:42,194 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:42,257 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:35:42,257 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:35:42,312 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:42,339 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:42,433 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:35:42,434 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:35:42,633 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:35:42,634 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:35:43,679 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:43,684 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:43,689 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:35:43,802 INFO L356 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-03 02:35:43,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-11-03 02:35:44,493 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:44,574 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:44,577 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:44,590 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:44,607 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:44,688 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:44,689 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:44,860 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:44,861 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:44,975 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:44,996 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:35:51,540 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5239#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:35:51,541 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:35:51,541 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:35:51,541 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 14] total 33 [2022-11-03 02:35:51,541 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [385741754] [2022-11-03 02:35:51,541 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:35:51,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-03 02:35:51,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:35:51,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-03 02:35:51,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=203, Invalid=1968, Unknown=3, NotChecked=276, Total=2450 [2022-11-03 02:35:51,544 INFO L87 Difference]: Start difference. First operand 69 states and 79 transitions. Second operand has 34 states, 34 states have (on average 2.0588235294117645) internal successors, (70), 33 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:52,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:35:52,356 INFO L93 Difference]: Finished difference Result 75 states and 84 transitions. [2022-11-03 02:35:52,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-03 02:35:52,357 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 34 states have (on average 2.0588235294117645) internal successors, (70), 33 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-11-03 02:35:52,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:35:52,357 INFO L225 Difference]: With dead ends: 75 [2022-11-03 02:35:52,357 INFO L226 Difference]: Without dead ends: 70 [2022-11-03 02:35:52,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 39 SyntacticMatches, 3 SemanticMatches, 61 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 917 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=342, Invalid=3207, Unknown=3, NotChecked=354, Total=3906 [2022-11-03 02:35:52,359 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 49 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 135 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:35:52,360 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 103 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 146 Invalid, 0 Unknown, 135 Unchecked, 0.1s Time] [2022-11-03 02:35:52,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-03 02:35:52,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 69. [2022-11-03 02:35:52,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 66 states have (on average 1.1818181818181819) internal successors, (78), 68 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:52,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 78 transitions. [2022-11-03 02:35:52,362 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 78 transitions. Word has length 27 [2022-11-03 02:35:52,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:35:52,363 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 78 transitions. [2022-11-03 02:35:52,363 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 34 states have (on average 2.0588235294117645) internal successors, (70), 33 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:35:52,363 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 78 transitions. [2022-11-03 02:35:52,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-03 02:35:52,364 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:35:52,364 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:35:52,400 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-03 02:35:52,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-03 02:35:52,564 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:35:52,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:35:52,565 INFO L85 PathProgramCache]: Analyzing trace with hash -1020966952, now seen corresponding path program 1 times [2022-11-03 02:35:52,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:35:52,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774385734] [2022-11-03 02:35:52,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:52,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:35:52,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:53,153 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:35:53,153 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:35:53,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774385734] [2022-11-03 02:35:53,154 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774385734] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:35:53,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [618199725] [2022-11-03 02:35:53,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:35:53,154 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:35:53,154 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:35:53,155 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:35:53,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-03 02:35:53,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:35:53,310 INFO L263 TraceCheckSpWp]: Trace formula consists of 228 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-03 02:35:53,313 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:35:53,317 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:35:53,496 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:53,714 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:35:53,824 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:35:53,825 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:35:53,856 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:35:53,856 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:35:53,957 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_645 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_645) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-03 02:35:53,966 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_645 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_645) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:35:53,999 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_645 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_645) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ |c_ULTIMATE.start_cstrncat_~src#1.offset| 1)) 0)) is different from false [2022-11-03 02:35:54,006 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:54,007 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:35:54,014 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:35:54,014 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:35:54,204 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 3 not checked. [2022-11-03 02:35:54,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [618199725] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:35:54,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [617986101] [2022-11-03 02:35:54,206 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:35:54,206 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:35:54,207 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:35:54,207 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:35:54,207 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:35:54,247 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:54,249 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:35:54,250 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:35:54,289 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:54,332 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:54,364 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:35:54,436 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:35:54,437 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:35:54,496 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:54,518 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:35:54,610 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:35:54,611 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:35:54,789 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:35:54,789 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:35:55,634 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:55,663 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:55,784 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:55,784 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:55,976 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:35:55,977 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:35:56,229 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:56,229 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:56,421 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:35:56,422 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:35:56,649 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:35:56,667 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:36:02,858 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5621#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_57| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_56| Int)) (and (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_57|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_56|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_57|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_56|) 0)) (= 1 (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_57|)) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_56| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_57|)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_57|) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_56|))) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:36:02,859 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:36:02,859 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:36:02,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 13] total 33 [2022-11-03 02:36:02,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694297516] [2022-11-03 02:36:02,859 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:36:02,860 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-03 02:36:02,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:02,860 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-03 02:36:02,861 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=136, Invalid=1943, Unknown=3, NotChecked=270, Total=2352 [2022-11-03 02:36:02,862 INFO L87 Difference]: Start difference. First operand 69 states and 78 transitions. Second operand has 33 states, 33 states have (on average 2.0303030303030303) internal successors, (67), 33 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:04,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:04,113 INFO L93 Difference]: Finished difference Result 121 states and 133 transitions. [2022-11-03 02:36:04,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-03 02:36:04,114 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.0303030303030303) internal successors, (67), 33 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-03 02:36:04,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:04,115 INFO L225 Difference]: With dead ends: 121 [2022-11-03 02:36:04,115 INFO L226 Difference]: Without dead ends: 84 [2022-11-03 02:36:04,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 48 SyntacticMatches, 4 SemanticMatches, 67 ConstructedPredicates, 3 IntricatePredicates, 1 DeprecatedPredicates, 884 ImplicationChecksByTransitivity, 8.0s TimeCoverageRelationStatistics Valid=293, Invalid=4006, Unknown=3, NotChecked=390, Total=4692 [2022-11-03 02:36:04,118 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 41 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 301 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 444 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 131 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:04,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 158 Invalid, 444 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 301 Invalid, 0 Unknown, 131 Unchecked, 0.2s Time] [2022-11-03 02:36:04,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-03 02:36:04,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 80. [2022-11-03 02:36:04,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 77 states have (on average 1.1818181818181819) internal successors, (91), 79 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:04,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 91 transitions. [2022-11-03 02:36:04,121 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 91 transitions. Word has length 28 [2022-11-03 02:36:04,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:04,121 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 91 transitions. [2022-11-03 02:36:04,121 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.0303030303030303) internal successors, (67), 33 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:04,122 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 91 transitions. [2022-11-03 02:36:04,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-03 02:36:04,122 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:04,122 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:04,150 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:04,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:04,341 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:36:04,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:04,342 INFO L85 PathProgramCache]: Analyzing trace with hash -984516838, now seen corresponding path program 4 times [2022-11-03 02:36:04,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:04,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [441732717] [2022-11-03 02:36:04,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:04,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:04,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:06,354 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 4 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:06,355 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:06,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [441732717] [2022-11-03 02:36:06,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [441732717] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:06,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [579516952] [2022-11-03 02:36:06,355 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:36:06,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:06,356 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:06,358 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:06,387 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-03 02:36:06,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:06,529 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-03 02:36:06,533 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:06,561 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:36:06,870 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:36:06,924 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:36:07,259 INFO L356 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-11-03 02:36:07,259 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-11-03 02:36:07,295 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 7 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:07,296 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:36:07,551 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_687 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_687) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)))) is different from false [2022-11-03 02:36:07,560 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:07,561 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-03 02:36:07,576 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:07,576 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 63 [2022-11-03 02:36:07,597 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:07,598 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 15 [2022-11-03 02:36:08,183 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:36:08,201 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:08,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [579516952] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:36:08,202 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [330265767] [2022-11-03 02:36:08,203 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:36:08,204 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:36:08,204 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:36:08,205 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:36:08,205 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:36:08,254 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:08,260 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:08,261 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:36:08,306 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:08,349 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:08,379 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:08,435 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:36:08,505 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:08,535 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:08,661 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:36:08,662 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:36:08,850 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:36:08,851 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:36:09,550 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:09,577 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:09,675 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:09,676 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:09,757 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:09,777 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:36:15,147 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6094#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:36:15,147 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:36:15,147 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:36:15,147 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 15, 15] total 45 [2022-11-03 02:36:15,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [604822163] [2022-11-03 02:36:15,148 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:36:15,148 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-03 02:36:15,148 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:15,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-03 02:36:15,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=3273, Unknown=1, NotChecked=116, Total=3660 [2022-11-03 02:36:15,150 INFO L87 Difference]: Start difference. First operand 80 states and 91 transitions. Second operand has 46 states, 46 states have (on average 1.6521739130434783) internal successors, (76), 45 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:18,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:18,570 INFO L93 Difference]: Finished difference Result 114 states and 129 transitions. [2022-11-03 02:36:18,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-03 02:36:18,570 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 1.6521739130434783) internal successors, (76), 45 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-03 02:36:18,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:18,571 INFO L225 Difference]: With dead ends: 114 [2022-11-03 02:36:18,571 INFO L226 Difference]: Without dead ends: 105 [2022-11-03 02:36:18,573 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 44 SyntacticMatches, 4 SemanticMatches, 78 ConstructedPredicates, 1 IntricatePredicates, 3 DeprecatedPredicates, 2114 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=539, Invalid=5626, Unknown=1, NotChecked=154, Total=6320 [2022-11-03 02:36:18,573 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 64 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 511 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 613 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 511 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 68 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:18,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 210 Invalid, 613 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 511 Invalid, 0 Unknown, 68 Unchecked, 0.5s Time] [2022-11-03 02:36:18,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2022-11-03 02:36:18,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 96. [2022-11-03 02:36:18,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 93 states have (on average 1.1935483870967742) internal successors, (111), 95 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:18,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 111 transitions. [2022-11-03 02:36:18,577 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 111 transitions. Word has length 29 [2022-11-03 02:36:18,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:18,577 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 111 transitions. [2022-11-03 02:36:18,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 1.6521739130434783) internal successors, (76), 45 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:18,577 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 111 transitions. [2022-11-03 02:36:18,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:36:18,578 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:18,578 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:18,603 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:18,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:18,782 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:36:18,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:18,782 INFO L85 PathProgramCache]: Analyzing trace with hash -1277104003, now seen corresponding path program 5 times [2022-11-03 02:36:18,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:18,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [355765153] [2022-11-03 02:36:18,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:18,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:18,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:19,571 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 4 proven. 24 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:36:19,571 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:19,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [355765153] [2022-11-03 02:36:19,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [355765153] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:19,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [102110071] [2022-11-03 02:36:19,571 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:36:19,572 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:19,572 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:19,586 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:19,609 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-03 02:36:19,829 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-03 02:36:19,829 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:36:19,833 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-03 02:36:19,836 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:19,883 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:36:19,891 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-03 02:36:20,302 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-03 02:36:20,415 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 32 [2022-11-03 02:36:21,572 INFO L356 Elim1Store]: treesize reduction 8, result has 80.5 percent of original size [2022-11-03 02:36:21,573 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 2 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 3 case distinctions, treesize of input 51 treesize of output 50 [2022-11-03 02:36:21,810 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-03 02:36:21,810 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:36:22,789 INFO L356 Elim1Store]: treesize reduction 46, result has 43.2 percent of original size [2022-11-03 02:36:22,789 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 122 treesize of output 130 [2022-11-03 02:36:22,819 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:22,819 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 46 [2022-11-03 02:36:22,828 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:36:22,853 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:22,854 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:22,874 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:22,875 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 64 [2022-11-03 02:36:23,856 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:23,878 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:36:23,995 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-03 02:36:23,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [102110071] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:36:23,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1347937761] [2022-11-03 02:36:23,997 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:36:23,997 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:36:23,997 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:36:23,997 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:36:23,998 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:36:24,054 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:24,057 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:24,058 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:36:24,091 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:24,143 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:24,171 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:36:24,241 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:36:24,242 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:36:24,307 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:24,330 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:24,465 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:36:24,465 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:36:24,707 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:36:24,708 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:36:25,561 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:25,574 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:25,669 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:25,669 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:25,741 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:25,755 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:36:31,632 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6583#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:36:31,632 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:36:31,632 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:36:31,632 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 13, 14] total 42 [2022-11-03 02:36:31,632 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345679170] [2022-11-03 02:36:31,633 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:36:31,633 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-11-03 02:36:31,633 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:31,634 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-11-03 02:36:31,634 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=259, Invalid=3047, Unknown=0, NotChecked=0, Total=3306 [2022-11-03 02:36:31,634 INFO L87 Difference]: Start difference. First operand 96 states and 111 transitions. Second operand has 43 states, 42 states have (on average 1.9285714285714286) internal successors, (81), 43 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:34,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:34,086 INFO L93 Difference]: Finished difference Result 136 states and 159 transitions. [2022-11-03 02:36:34,086 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-03 02:36:34,087 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 42 states have (on average 1.9285714285714286) internal successors, (81), 43 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-03 02:36:34,087 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:34,088 INFO L225 Difference]: With dead ends: 136 [2022-11-03 02:36:34,088 INFO L226 Difference]: Without dead ends: 134 [2022-11-03 02:36:34,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1304 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=540, Invalid=5622, Unknown=0, NotChecked=0, Total=6162 [2022-11-03 02:36:34,090 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 55 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 501 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 615 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 501 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 104 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:34,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 133 Invalid, 615 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 501 Invalid, 0 Unknown, 104 Unchecked, 0.4s Time] [2022-11-03 02:36:34,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2022-11-03 02:36:34,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 118. [2022-11-03 02:36:34,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 115 states have (on average 1.208695652173913) internal successors, (139), 117 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:34,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 139 transitions. [2022-11-03 02:36:34,095 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 139 transitions. Word has length 31 [2022-11-03 02:36:34,095 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:34,095 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 139 transitions. [2022-11-03 02:36:34,095 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 42 states have (on average 1.9285714285714286) internal successors, (81), 43 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:34,096 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 139 transitions. [2022-11-03 02:36:34,096 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-03 02:36:34,096 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:34,097 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:34,125 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:34,301 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-03 02:36:34,302 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:36:34,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:34,302 INFO L85 PathProgramCache]: Analyzing trace with hash -1835093626, now seen corresponding path program 3 times [2022-11-03 02:36:34,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:34,302 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2073896811] [2022-11-03 02:36:34,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:34,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:34,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:34,761 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:36:34,761 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:34,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2073896811] [2022-11-03 02:36:34,761 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2073896811] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:34,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1225349335] [2022-11-03 02:36:34,761 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:36:34,761 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:34,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:34,766 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:34,789 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-03 02:36:34,968 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:36:34,969 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:36:34,971 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-03 02:36:34,972 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:35,150 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:36:35,150 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:36:35,380 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-03 02:36:35,432 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:36:35,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1225349335] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:36:35,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [407740435] [2022-11-03 02:36:35,435 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:36:35,435 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:36:35,436 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:36:35,436 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:36:35,436 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:36:35,477 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:35,481 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:35,481 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:36:35,523 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:36:35,559 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:35,587 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:36:35,651 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:36:35,651 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:36:35,702 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:35,734 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:35,846 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:36:35,848 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:36:36,062 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:36:36,062 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:36:37,022 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:37,024 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:37,030 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:37,150 INFO L356 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-03 02:36:37,151 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1026 treesize of output 1019 [2022-11-03 02:36:37,432 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:37,436 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:37,447 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:37,454 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:38,270 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:38,333 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:38,333 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:38,508 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:38,508 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:38,612 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:38,630 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:36:45,001 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7103#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-11-03 02:36:45,001 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:36:45,001 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:36:45,001 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 23 [2022-11-03 02:36:45,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1469834064] [2022-11-03 02:36:45,002 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:36:45,002 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-03 02:36:45,002 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:36:45,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-03 02:36:45,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=162, Invalid=1398, Unknown=0, NotChecked=0, Total=1560 [2022-11-03 02:36:45,003 INFO L87 Difference]: Start difference. First operand 118 states and 139 transitions. Second operand has 24 states, 23 states have (on average 2.5652173913043477) internal successors, (59), 24 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:45,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:36:45,784 INFO L93 Difference]: Finished difference Result 135 states and 152 transitions. [2022-11-03 02:36:45,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-03 02:36:45,785 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.5652173913043477) internal successors, (59), 24 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-03 02:36:45,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:36:45,786 INFO L225 Difference]: With dead ends: 135 [2022-11-03 02:36:45,786 INFO L226 Difference]: Without dead ends: 135 [2022-11-03 02:36:45,786 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 61 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 622 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=314, Invalid=2136, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 02:36:45,787 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 233 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 419 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 233 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 419 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:36:45,787 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [233 Valid, 107 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 419 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-03 02:36:45,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135 states. [2022-11-03 02:36:45,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135 to 124. [2022-11-03 02:36:45,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 121 states have (on average 1.2066115702479339) internal successors, (146), 123 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:45,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 146 transitions. [2022-11-03 02:36:45,791 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 146 transitions. Word has length 31 [2022-11-03 02:36:45,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:36:45,791 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 146 transitions. [2022-11-03 02:36:45,791 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.5652173913043477) internal successors, (59), 24 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:36:45,792 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 146 transitions. [2022-11-03 02:36:45,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-03 02:36:45,792 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:36:45,792 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:36:45,833 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-03 02:36:45,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:45,993 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:36:45,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:36:45,993 INFO L85 PathProgramCache]: Analyzing trace with hash 1063739144, now seen corresponding path program 1 times [2022-11-03 02:36:45,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:36:45,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1957821362] [2022-11-03 02:36:45,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:45,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:36:46,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:46,779 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:36:46,779 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:36:46,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1957821362] [2022-11-03 02:36:46,780 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1957821362] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:36:46,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1570690785] [2022-11-03 02:36:46,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:36:46,780 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:36:46,780 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:36:46,782 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:36:46,783 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-03 02:36:47,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:36:47,159 INFO L263 TraceCheckSpWp]: Trace formula consists of 257 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-03 02:36:47,162 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:36:47,201 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:36:47,211 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-03 02:36:47,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-03 02:36:47,852 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 26 [2022-11-03 02:36:48,402 INFO L356 Elim1Store]: treesize reduction 4, result has 88.2 percent of original size [2022-11-03 02:36:48,403 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 35 treesize of output 40 [2022-11-03 02:36:48,898 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 3 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:48,898 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:36:49,920 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_831 (Array Int Int)) (|v_ULTIMATE.start_cstrncat_~d~0#1.offset_140| Int)) (let ((.cse1 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_831) |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (<= (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_140| 5) .cse0) (not (<= 0 |v_ULTIMATE.start_cstrncat_~d~0#1.offset_140|)) (= (select .cse1 (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_140| 2)) 0) (= (select .cse1 (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_140| 1)) 0) (< |c_ULTIMATE.start_main_~nondetString1~0#1.offset| |v_ULTIMATE.start_cstrncat_~d~0#1.offset_140|) (not (<= (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_140| 4) .cse0))))) (= (mod (+ |c_ULTIMATE.start_main_~n~0#1| 4294967295) 4294967296) 0)) is different from false [2022-11-03 02:36:49,941 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:49,941 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-03 02:36:49,960 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:36:49,960 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 65 treesize of output 69 [2022-11-03 02:36:49,970 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2022-11-03 02:36:51,493 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:36:51,507 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:36:51,663 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 1 proven. 31 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:36:51,663 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1570690785] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:36:51,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1021354869] [2022-11-03 02:36:51,665 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:36:51,665 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:36:51,666 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:36:51,666 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:36:51,666 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:36:51,727 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:51,731 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:36:51,732 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:36:51,775 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:36:51,814 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:51,845 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:51,893 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:36:51,942 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:51,969 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:36:52,074 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:36:52,075 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:36:52,265 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:36:52,266 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:36:52,983 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:52,990 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:53,069 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:53,069 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:53,216 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:36:53,216 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:36:53,401 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:53,402 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:53,548 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:36:53,549 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:36:53,695 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:36:53,711 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:37:00,826 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7644#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:37:00,827 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:37:00,827 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:37:00,827 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 19, 20] total 54 [2022-11-03 02:37:00,827 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895339315] [2022-11-03 02:37:00,827 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:37:00,828 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-03 02:37:00,828 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:37:00,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-03 02:37:00,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=411, Invalid=4148, Unknown=1, NotChecked=132, Total=4692 [2022-11-03 02:37:00,830 INFO L87 Difference]: Start difference. First operand 124 states and 146 transitions. Second operand has 54 states, 54 states have (on average 1.8333333333333333) internal successors, (99), 54 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:05,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:37:05,418 INFO L93 Difference]: Finished difference Result 250 states and 286 transitions. [2022-11-03 02:37:05,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-03 02:37:05,419 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.8333333333333333) internal successors, (99), 54 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-03 02:37:05,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:37:05,420 INFO L225 Difference]: With dead ends: 250 [2022-11-03 02:37:05,420 INFO L226 Difference]: Without dead ends: 220 [2022-11-03 02:37:05,421 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 46 SyntacticMatches, 4 SemanticMatches, 98 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 2815 ImplicationChecksByTransitivity, 13.7s TimeCoverageRelationStatistics Valid=938, Invalid=8767, Unknown=1, NotChecked=194, Total=9900 [2022-11-03 02:37:05,422 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 183 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 940 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 264 SdHoareTripleChecker+Invalid, 1245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 209 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:37:05,422 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 264 Invalid, 1245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 940 Invalid, 0 Unknown, 209 Unchecked, 1.0s Time] [2022-11-03 02:37:05,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-11-03 02:37:05,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 179. [2022-11-03 02:37:05,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 176 states have (on average 1.2102272727272727) internal successors, (213), 178 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:05,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 213 transitions. [2022-11-03 02:37:05,428 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 213 transitions. Word has length 33 [2022-11-03 02:37:05,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:37:05,428 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 213 transitions. [2022-11-03 02:37:05,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.8333333333333333) internal successors, (99), 54 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:05,429 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 213 transitions. [2022-11-03 02:37:05,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-03 02:37:05,429 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:37:05,430 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:37:05,464 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-03 02:37:05,630 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-11-03 02:37:05,630 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:37:05,631 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:37:05,631 INFO L85 PathProgramCache]: Analyzing trace with hash -1877983743, now seen corresponding path program 2 times [2022-11-03 02:37:05,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:37:05,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890965372] [2022-11-03 02:37:05,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:37:05,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:37:05,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:37:06,359 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:37:06,359 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:37:06,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890965372] [2022-11-03 02:37:06,359 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1890965372] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:37:06,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1520232969] [2022-11-03 02:37:06,359 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:37:06,360 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:37:06,360 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:37:06,361 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:37:06,362 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-03 02:37:06,573 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:37:06,573 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:37:06,576 INFO L263 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-03 02:37:06,579 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:37:06,618 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:06,618 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-03 02:37:06,626 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:37:07,935 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 4 proven. 14 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:37:07,935 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:37:09,133 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:37:09,202 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 4 proven. 14 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:37:09,202 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1520232969] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:37:09,202 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1894836057] [2022-11-03 02:37:09,204 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:37:09,205 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:37:09,205 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:37:09,205 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:37:09,205 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:37:09,274 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:09,282 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:09,283 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:37:09,331 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:37:09,373 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:09,403 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:09,451 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:37:09,504 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:09,529 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:09,627 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:37:09,627 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:37:09,858 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:37:09,859 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:37:10,657 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:10,669 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:10,761 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:10,761 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:10,911 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:37:10,911 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:37:11,109 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:11,110 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:11,252 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:11,252 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:11,446 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:11,462 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:37:18,903 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8401#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_91| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_90| Int)) (and (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_90|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_91|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_90|) 0)) (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_91|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_90|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_91|) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_90| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_91|)) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_91|) 1))) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:37:18,904 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:37:18,904 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:37:18,904 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 16, 14] total 47 [2022-11-03 02:37:18,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [35149526] [2022-11-03 02:37:18,904 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:37:18,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-03 02:37:18,905 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:37:18,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-03 02:37:18,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=309, Invalid=3723, Unknown=0, NotChecked=0, Total=4032 [2022-11-03 02:37:18,906 INFO L87 Difference]: Start difference. First operand 179 states and 213 transitions. Second operand has 48 states, 47 states have (on average 2.0425531914893615) internal successors, (96), 48 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:32,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:37:32,901 INFO L93 Difference]: Finished difference Result 275 states and 305 transitions. [2022-11-03 02:37:32,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2022-11-03 02:37:32,903 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 47 states have (on average 2.0425531914893615) internal successors, (96), 48 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-11-03 02:37:32,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:37:32,904 INFO L225 Difference]: With dead ends: 275 [2022-11-03 02:37:32,904 INFO L226 Difference]: Without dead ends: 270 [2022-11-03 02:37:32,906 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 119 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3163 ImplicationChecksByTransitivity, 21.5s TimeCoverageRelationStatistics Valid=2207, Invalid=12313, Unknown=0, NotChecked=0, Total=14520 [2022-11-03 02:37:32,907 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 730 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 1625 mSolverCounterSat, 375 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 730 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 2000 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 375 IncrementalHoareTripleChecker+Valid, 1625 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-11-03 02:37:32,907 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [730 Valid, 167 Invalid, 2000 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [375 Valid, 1625 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-11-03 02:37:32,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-11-03 02:37:32,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 199. [2022-11-03 02:37:32,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 196 states have (on average 1.2040816326530612) internal successors, (236), 198 states have internal predecessors, (236), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:32,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 236 transitions. [2022-11-03 02:37:32,913 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 236 transitions. Word has length 34 [2022-11-03 02:37:32,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:37:32,914 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 236 transitions. [2022-11-03 02:37:32,914 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 47 states have (on average 2.0425531914893615) internal successors, (96), 48 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:32,914 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 236 transitions. [2022-11-03 02:37:32,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 02:37:32,915 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:37:32,915 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:37:32,943 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-03 02:37:33,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-03 02:37:33,126 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:37:33,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:37:33,126 INFO L85 PathProgramCache]: Analyzing trace with hash 1349829763, now seen corresponding path program 4 times [2022-11-03 02:37:33,126 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:37:33,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140764969] [2022-11-03 02:37:33,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:37:33,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:37:33,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:37:33,560 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:37:33,561 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:37:33,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140764969] [2022-11-03 02:37:33,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [140764969] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:37:33,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [26490243] [2022-11-03 02:37:33,561 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:37:33,561 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:37:33,562 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:37:33,563 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:37:33,602 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-03 02:37:33,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:37:33,780 INFO L263 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 66 conjunts are in the unsatisfiable core [2022-11-03 02:37:33,782 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:37:33,787 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:37:33,965 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:34,116 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:37:34,211 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-03 02:37:34,323 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:37:34,324 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-03 02:37:34,353 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:37:34,353 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:37:34,425 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_936 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_936) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-03 02:37:34,434 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_936 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_936) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:37:34,457 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_936 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_936) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2)) 0)) is different from false [2022-11-03 02:37:34,469 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_936 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_936) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~src#1.offset|)) 0)) is different from false [2022-11-03 02:37:34,476 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:37:34,477 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:37:34,484 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:37:34,484 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:37:34,641 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 9 trivial. 12 not checked. [2022-11-03 02:37:34,641 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [26490243] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:37:34,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1167288435] [2022-11-03 02:37:34,643 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:37:34,643 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:37:34,644 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:37:34,644 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:37:34,644 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:37:34,693 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:34,696 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:34,697 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:37:34,733 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:34,783 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:34,810 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:34,860 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:37:34,912 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:34,934 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:35,060 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:37:35,060 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:37:35,237 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:37:35,238 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:37:36,269 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:37:36,271 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:37:36,275 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:37:36,367 INFO L356 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-03 02:37:36,367 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-11-03 02:37:37,007 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:37,031 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:37,035 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:37,089 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:37,090 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:37,256 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:37,257 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:37,362 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:37,392 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:37:43,941 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9248#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:37:43,941 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:37:43,942 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:37:43,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 15, 15] total 33 [2022-11-03 02:37:43,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1320422011] [2022-11-03 02:37:43,942 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:37:43,942 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-03 02:37:43,942 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:37:43,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-03 02:37:43,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=1810, Unknown=4, NotChecked=356, Total=2352 [2022-11-03 02:37:43,943 INFO L87 Difference]: Start difference. First operand 199 states and 236 transitions. Second operand has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:45,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:37:45,621 INFO L93 Difference]: Finished difference Result 234 states and 273 transitions. [2022-11-03 02:37:45,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-03 02:37:45,622 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-03 02:37:45,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:37:45,623 INFO L225 Difference]: With dead ends: 234 [2022-11-03 02:37:45,623 INFO L226 Difference]: Without dead ends: 215 [2022-11-03 02:37:45,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 68 SyntacticMatches, 4 SemanticMatches, 74 ConstructedPredicates, 4 IntricatePredicates, 5 DeprecatedPredicates, 1425 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=440, Invalid=4684, Unknown=4, NotChecked=572, Total=5700 [2022-11-03 02:37:45,625 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 102 mSDsluCounter, 205 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 517 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 261 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:37:45,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 198 Invalid, 517 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 221 Invalid, 0 Unknown, 261 Unchecked, 0.2s Time] [2022-11-03 02:37:45,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215 states. [2022-11-03 02:37:45,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215 to 213. [2022-11-03 02:37:45,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 210 states have (on average 1.1952380952380952) internal successors, (251), 212 states have internal predecessors, (251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:45,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 251 transitions. [2022-11-03 02:37:45,631 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 251 transitions. Word has length 36 [2022-11-03 02:37:45,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:37:45,632 INFO L495 AbstractCegarLoop]: Abstraction has 213 states and 251 transitions. [2022-11-03 02:37:45,632 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 33 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:45,632 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 251 transitions. [2022-11-03 02:37:45,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-03 02:37:45,633 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:37:45,633 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:37:45,670 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-03 02:37:45,849 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-03 02:37:45,850 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:37:45,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:37:45,850 INFO L85 PathProgramCache]: Analyzing trace with hash -856073332, now seen corresponding path program 2 times [2022-11-03 02:37:45,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:37:45,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [879676045] [2022-11-03 02:37:45,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:37:45,850 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:37:45,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:37:46,226 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:37:46,226 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:37:46,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [879676045] [2022-11-03 02:37:46,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [879676045] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:37:46,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [793001100] [2022-11-03 02:37:46,226 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:37:46,227 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:37:46,227 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:37:46,228 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:37:46,229 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-03 02:37:46,489 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-03 02:37:46,489 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:37:46,491 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-03 02:37:46,493 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:37:46,980 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:37:46,980 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:37:47,953 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-03 02:37:48,130 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 4 proven. 20 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:37:48,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [793001100] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:37:48,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [350153173] [2022-11-03 02:37:48,132 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:37:48,132 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:37:48,133 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:37:48,133 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:37:48,133 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:37:48,191 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:48,194 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:37:48,195 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:37:48,234 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:48,282 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:48,311 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:48,368 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:37:48,417 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:48,447 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:37:48,546 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:37:48,547 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:37:48,732 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:37:48,732 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:37:49,621 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:49,640 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:49,705 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:49,706 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:49,839 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:37:49,839 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:37:50,038 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:50,038 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:50,177 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:37:50,177 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:37:50,315 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:37:50,327 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:37:56,209 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10018#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:37:56,209 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:37:56,210 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:37:56,210 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 15, 15] total 40 [2022-11-03 02:37:56,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1697464461] [2022-11-03 02:37:56,210 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:37:56,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-03 02:37:56,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:37:56,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-03 02:37:56,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=287, Invalid=2793, Unknown=0, NotChecked=0, Total=3080 [2022-11-03 02:37:56,212 INFO L87 Difference]: Start difference. First operand 213 states and 251 transitions. Second operand has 41 states, 41 states have (on average 2.341463414634146) internal successors, (96), 40 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:59,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:37:59,119 INFO L93 Difference]: Finished difference Result 237 states and 270 transitions. [2022-11-03 02:37:59,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-03 02:37:59,119 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 2.341463414634146) internal successors, (96), 40 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-03 02:37:59,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:37:59,120 INFO L225 Difference]: With dead ends: 237 [2022-11-03 02:37:59,120 INFO L226 Difference]: Without dead ends: 213 [2022-11-03 02:37:59,121 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1882 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=1043, Invalid=6267, Unknown=0, NotChecked=0, Total=7310 [2022-11-03 02:37:59,121 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 651 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 604 mSolverCounterSat, 196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 651 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 800 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 196 IncrementalHoareTripleChecker+Valid, 604 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-03 02:37:59,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [651 Valid, 104 Invalid, 800 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [196 Valid, 604 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-03 02:37:59,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-11-03 02:37:59,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 191. [2022-11-03 02:37:59,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 188 states have (on average 1.202127659574468) internal successors, (226), 190 states have internal predecessors, (226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:59,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 226 transitions. [2022-11-03 02:37:59,127 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 226 transitions. Word has length 36 [2022-11-03 02:37:59,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:37:59,127 INFO L495 AbstractCegarLoop]: Abstraction has 191 states and 226 transitions. [2022-11-03 02:37:59,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 2.341463414634146) internal successors, (96), 40 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:37:59,128 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 226 transitions. [2022-11-03 02:37:59,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:37:59,128 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:37:59,129 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:37:59,163 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-03 02:37:59,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-03 02:37:59,342 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:37:59,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:37:59,342 INFO L85 PathProgramCache]: Analyzing trace with hash 790339730, now seen corresponding path program 3 times [2022-11-03 02:37:59,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:37:59,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [351472270] [2022-11-03 02:37:59,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:37:59,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:37:59,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:38:00,175 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:38:00,175 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:38:00,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [351472270] [2022-11-03 02:38:00,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [351472270] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:38:00,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [301172891] [2022-11-03 02:38:00,175 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:38:00,176 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:38:00,176 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:38:00,178 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:38:00,182 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-03 02:38:00,447 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:38:00,448 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:38:00,452 INFO L263 TraceCheckSpWp]: Trace formula consists of 281 conjuncts, 103 conjunts are in the unsatisfiable core [2022-11-03 02:38:00,455 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:38:00,504 INFO L356 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-03 02:38:00,505 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-03 02:38:00,522 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:38:01,174 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-03 02:38:01,296 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 27 [2022-11-03 02:38:02,092 INFO L356 Elim1Store]: treesize reduction 8, result has 84.0 percent of original size [2022-11-03 02:38:02,092 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 4 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 41 treesize of output 56 [2022-11-03 02:38:02,472 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 0 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:38:02,472 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:38:03,324 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:38:03,324 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 79 treesize of output 51 [2022-11-03 02:38:03,351 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:38:03,352 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 90 treesize of output 92 [2022-11-03 02:38:03,358 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 22 [2022-11-03 02:38:04,917 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:38:04,930 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:38:04,933 WARN L234 Elim1Store]: Array PQE input equivalent to true [2022-11-03 02:38:04,934 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 1 proven. 48 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:38:04,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [301172891] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:38:04,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1845810619] [2022-11-03 02:38:04,936 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:38:04,936 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:38:04,937 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:38:04,937 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:38:04,937 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:38:04,982 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:04,987 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:04,988 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:38:05,051 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:38:05,091 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:05,120 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:05,163 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:38:05,211 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:05,237 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:05,338 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:38:05,338 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:38:05,522 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:38:05,523 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:38:06,526 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:06,550 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:06,642 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:06,643 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:06,802 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:38:06,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:38:06,997 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:06,998 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:07,156 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:07,156 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:07,292 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:07,309 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:38:13,871 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10798#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:38:13,871 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:38:13,872 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:38:13,872 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 22, 22] total 60 [2022-11-03 02:38:13,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920546670] [2022-11-03 02:38:13,872 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:38:13,873 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-11-03 02:38:13,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:38:13,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-11-03 02:38:13,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=462, Invalid=5238, Unknown=0, NotChecked=0, Total=5700 [2022-11-03 02:38:13,874 INFO L87 Difference]: Start difference. First operand 191 states and 226 transitions. Second operand has 61 states, 60 states have (on average 1.8333333333333333) internal successors, (110), 61 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:17,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:38:17,384 INFO L93 Difference]: Finished difference Result 341 states and 390 transitions. [2022-11-03 02:38:17,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-03 02:38:17,385 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 60 states have (on average 1.8333333333333333) internal successors, (110), 61 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:38:17,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:38:17,386 INFO L225 Difference]: With dead ends: 341 [2022-11-03 02:38:17,386 INFO L226 Difference]: Without dead ends: 311 [2022-11-03 02:38:17,388 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3622 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=954, Invalid=9966, Unknown=0, NotChecked=0, Total=10920 [2022-11-03 02:38:17,388 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 185 mSDsluCounter, 299 mSDsCounter, 0 mSdLazyCounter, 1159 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 1432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 1159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 214 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:38:17,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 294 Invalid, 1432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 1159 Invalid, 0 Unknown, 214 Unchecked, 1.0s Time] [2022-11-03 02:38:17,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2022-11-03 02:38:17,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 243. [2022-11-03 02:38:17,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 240 states have (on average 1.2041666666666666) internal successors, (289), 242 states have internal predecessors, (289), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:17,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 289 transitions. [2022-11-03 02:38:17,397 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 289 transitions. Word has length 37 [2022-11-03 02:38:17,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:38:17,397 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 289 transitions. [2022-11-03 02:38:17,398 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 60 states have (on average 1.8333333333333333) internal successors, (110), 61 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:17,398 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 289 transitions. [2022-11-03 02:38:17,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-03 02:38:17,399 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:38:17,399 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:38:17,443 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-03 02:38:17,614 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-03 02:38:17,614 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:38:17,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:38:17,615 INFO L85 PathProgramCache]: Analyzing trace with hash -1831519310, now seen corresponding path program 6 times [2022-11-03 02:38:17,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:38:17,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [402986148] [2022-11-03 02:38:17,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:38:17,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:38:17,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:38:18,636 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:38:18,636 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:38:18,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [402986148] [2022-11-03 02:38:18,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [402986148] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:38:18,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1037035454] [2022-11-03 02:38:18,637 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:38:18,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:38:18,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:38:18,638 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:38:18,641 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-03 02:38:18,838 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:38:18,838 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:38:18,841 INFO L263 TraceCheckSpWp]: Trace formula consists of 277 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-03 02:38:18,844 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:38:18,878 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:38:19,317 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:38:19,387 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:38:22,113 INFO L356 Elim1Store]: treesize reduction 15, result has 51.6 percent of original size [2022-11-03 02:38:22,114 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 41 treesize of output 30 [2022-11-03 02:38:22,163 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 26 proven. 23 refuted. 4 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:38:22,163 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:38:22,612 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1082 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1082) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)))) is different from false [2022-11-03 02:38:22,619 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:38:22,619 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 79 treesize of output 51 [2022-11-03 02:38:22,635 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:38:22,635 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 90 treesize of output 92 [2022-11-03 02:38:22,640 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:38:22,640 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 34 treesize of output 22 [2022-11-03 02:38:23,720 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:38:23,753 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 31 proven. 22 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-03 02:38:23,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1037035454] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:38:23,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2123845062] [2022-11-03 02:38:23,755 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:38:23,755 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:38:23,755 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:38:23,756 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:38:23,756 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:38:23,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:23,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:23,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:38:23,837 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:23,884 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:23,910 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:23,966 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:38:24,018 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:24,047 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:24,190 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:38:24,190 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:38:24,363 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:38:24,364 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:38:25,209 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:25,226 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:25,306 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:25,306 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:25,389 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:25,406 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:38:31,645 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11730#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:38:31,645 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:38:31,645 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:38:31,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 19] total 55 [2022-11-03 02:38:31,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1431842590] [2022-11-03 02:38:31,646 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:38:31,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-03 02:38:31,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:38:31,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-03 02:38:31,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=268, Invalid=4423, Unknown=5, NotChecked=134, Total=4830 [2022-11-03 02:38:31,647 INFO L87 Difference]: Start difference. First operand 243 states and 289 transitions. Second operand has 55 states, 55 states have (on average 1.7272727272727273) internal successors, (95), 55 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:35,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:38:35,253 INFO L93 Difference]: Finished difference Result 218 states and 255 transitions. [2022-11-03 02:38:35,253 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-03 02:38:35,253 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 1.7272727272727273) internal successors, (95), 55 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-03 02:38:35,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:38:35,254 INFO L225 Difference]: With dead ends: 218 [2022-11-03 02:38:35,255 INFO L226 Difference]: Without dead ends: 205 [2022-11-03 02:38:35,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 59 SyntacticMatches, 1 SemanticMatches, 88 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1655 ImplicationChecksByTransitivity, 13.9s TimeCoverageRelationStatistics Valid=511, Invalid=7320, Unknown=5, NotChecked=174, Total=8010 [2022-11-03 02:38:35,256 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 68 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 642 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 856 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 642 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 179 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:38:35,256 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 195 Invalid, 856 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 642 Invalid, 0 Unknown, 179 Unchecked, 0.5s Time] [2022-11-03 02:38:35,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2022-11-03 02:38:35,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 204. [2022-11-03 02:38:35,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 201 states have (on average 1.199004975124378) internal successors, (241), 203 states have internal predecessors, (241), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:35,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 241 transitions. [2022-11-03 02:38:35,262 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 241 transitions. Word has length 37 [2022-11-03 02:38:35,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:38:35,262 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 241 transitions. [2022-11-03 02:38:35,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 1.7272727272727273) internal successors, (95), 55 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:35,262 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 241 transitions. [2022-11-03 02:38:35,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-03 02:38:35,263 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:38:35,263 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:38:35,301 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-03 02:38:35,463 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-03 02:38:35,464 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:38:35,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:38:35,464 INFO L85 PathProgramCache]: Analyzing trace with hash 1390763572, now seen corresponding path program 3 times [2022-11-03 02:38:35,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:38:35,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537855649] [2022-11-03 02:38:35,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:38:35,465 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:38:35,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:38:36,264 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 9 proven. 33 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:38:36,264 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:38:36,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537855649] [2022-11-03 02:38:36,264 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537855649] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:38:36,264 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [273550660] [2022-11-03 02:38:36,264 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:38:36,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:38:36,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:38:36,274 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:38:36,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-03 02:38:36,572 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:38:36,572 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:38:36,576 INFO L263 TraceCheckSpWp]: Trace formula consists of 302 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-03 02:38:36,579 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:38:36,591 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:36,592 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:38:36,598 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:38:37,240 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 0 proven. 42 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:38:37,241 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:38:38,124 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 0 proven. 42 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:38:38,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [273550660] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:38:38,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1863672056] [2022-11-03 02:38:38,126 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:38:38,127 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:38:38,127 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:38:38,127 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:38:38,127 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:38:38,167 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:38,171 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:38,172 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:38:38,210 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:38:38,250 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:38,275 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:38:38,336 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:38:38,337 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:38:38,394 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:38,425 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:38,543 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:38:38,544 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:38:38,742 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:38:38,743 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:38:39,561 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:39,576 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:39,663 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:39,663 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:39,857 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:38:39,857 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:38:40,060 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:40,061 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:40,223 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:40,224 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:40,435 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:40,451 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:38:47,245 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12490#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_132| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.base_133| Int)) (and (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_133|) 1) (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_133|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_132|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_132|) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_132| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_133|)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_133|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_133|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_132|) 0)))) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:38:47,245 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:38:47,246 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:38:47,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17, 17] total 48 [2022-11-03 02:38:47,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1150899932] [2022-11-03 02:38:47,246 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:38:47,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-03 02:38:47,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:38:47,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-03 02:38:47,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=287, Invalid=3873, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:38:47,249 INFO L87 Difference]: Start difference. First operand 204 states and 241 transitions. Second operand has 49 states, 48 states have (on average 2.3333333333333335) internal successors, (112), 49 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:50,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:38:50,361 INFO L93 Difference]: Finished difference Result 447 states and 498 transitions. [2022-11-03 02:38:50,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-03 02:38:50,361 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.3333333333333335) internal successors, (112), 49 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-03 02:38:50,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:38:50,363 INFO L225 Difference]: With dead ends: 447 [2022-11-03 02:38:50,363 INFO L226 Difference]: Without dead ends: 445 [2022-11-03 02:38:50,364 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 71 SyntacticMatches, 1 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2152 ImplicationChecksByTransitivity, 10.3s TimeCoverageRelationStatistics Valid=991, Invalid=7939, Unknown=0, NotChecked=0, Total=8930 [2022-11-03 02:38:50,365 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1191 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 1210 mSolverCounterSat, 339 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1191 SdHoareTripleChecker+Valid, 436 SdHoareTripleChecker+Invalid, 1549 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 339 IncrementalHoareTripleChecker+Valid, 1210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:38:50,365 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1191 Valid, 436 Invalid, 1549 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [339 Valid, 1210 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-03 02:38:50,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2022-11-03 02:38:50,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 234. [2022-11-03 02:38:50,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 231 states have (on average 1.1774891774891776) internal successors, (272), 233 states have internal predecessors, (272), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:50,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 272 transitions. [2022-11-03 02:38:50,373 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 272 transitions. Word has length 40 [2022-11-03 02:38:50,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:38:50,373 INFO L495 AbstractCegarLoop]: Abstraction has 234 states and 272 transitions. [2022-11-03 02:38:50,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.3333333333333335) internal successors, (112), 49 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:38:50,374 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 272 transitions. [2022-11-03 02:38:50,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-03 02:38:50,374 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:38:50,375 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:38:50,415 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-11-03 02:38:50,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-03 02:38:50,602 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:38:50,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:38:50,602 INFO L85 PathProgramCache]: Analyzing trace with hash 1651924211, now seen corresponding path program 5 times [2022-11-03 02:38:50,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:38:50,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1203419525] [2022-11-03 02:38:50,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:38:50,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:38:50,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:38:51,048 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:38:51,048 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:38:51,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1203419525] [2022-11-03 02:38:51,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1203419525] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:38:51,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [487323467] [2022-11-03 02:38:51,049 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:38:51,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:38:51,049 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:38:51,050 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:38:51,051 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-03 02:38:51,431 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-03 02:38:51,431 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:38:51,434 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-03 02:38:51,435 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:38:51,453 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:38:51,453 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-03 02:38:51,675 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:38:51,675 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:38:52,038 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:38:52,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [487323467] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:38:52,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [849427721] [2022-11-03 02:38:52,040 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:38:52,040 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:38:52,040 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:38:52,041 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:38:52,041 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:38:52,073 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:52,079 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:38:52,079 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:38:52,113 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:38:52,152 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:52,181 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:52,229 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:38:52,276 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:52,298 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:38:52,407 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:38:52,407 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:38:52,614 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:38:52,615 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:38:53,633 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:38:53,635 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:38:53,639 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:38:53,767 INFO L356 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-03 02:38:53,768 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1029 [2022-11-03 02:38:54,638 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:54,696 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:54,699 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:54,765 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:54,765 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:54,930 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:38:54,931 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:38:55,056 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:38:55,084 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:39:01,939 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13517#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:39:01,939 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:39:01,939 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:39:01,939 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 35 [2022-11-03 02:39:01,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [353095002] [2022-11-03 02:39:01,940 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:39:01,940 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-03 02:39:01,940 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:01,940 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-03 02:39:01,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=2379, Unknown=0, NotChecked=0, Total=2652 [2022-11-03 02:39:01,941 INFO L87 Difference]: Start difference. First operand 234 states and 272 transitions. Second operand has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:02,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:02,861 INFO L93 Difference]: Finished difference Result 362 states and 414 transitions. [2022-11-03 02:39:02,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-03 02:39:02,861 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-03 02:39:02,861 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:02,862 INFO L225 Difference]: With dead ends: 362 [2022-11-03 02:39:02,862 INFO L226 Difference]: Without dead ends: 362 [2022-11-03 02:39:02,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=573, Invalid=3587, Unknown=0, NotChecked=0, Total=4160 [2022-11-03 02:39:02,863 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 286 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 655 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 286 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 687 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 655 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:02,863 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [286 Valid, 238 Invalid, 687 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 655 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-03 02:39:02,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2022-11-03 02:39:02,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 292. [2022-11-03 02:39:02,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 289 states have (on average 1.193771626297578) internal successors, (345), 291 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:02,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 345 transitions. [2022-11-03 02:39:02,872 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 345 transitions. Word has length 40 [2022-11-03 02:39:02,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:02,873 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 345 transitions. [2022-11-03 02:39:02,873 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 35 states have (on average 2.7714285714285714) internal successors, (97), 36 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:02,873 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 345 transitions. [2022-11-03 02:39:02,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-03 02:39:02,874 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:02,874 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:02,916 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-03 02:39:03,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:39:03,094 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:39:03,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:03,094 INFO L85 PathProgramCache]: Analyzing trace with hash 261409081, now seen corresponding path program 1 times [2022-11-03 02:39:03,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:03,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520979938] [2022-11-03 02:39:03,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:03,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:03,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:03,618 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 18 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:39:03,619 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:03,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520979938] [2022-11-03 02:39:03,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520979938] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:39:03,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [616632451] [2022-11-03 02:39:03,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:03,619 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:39:03,619 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:39:03,621 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:39:03,656 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-03 02:39:03,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:03,864 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-03 02:39:03,866 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:39:04,017 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:04,323 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:39:04,324 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 23 [2022-11-03 02:39:04,331 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 3 [2022-11-03 02:39:04,593 INFO L356 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-03 02:39:04,593 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 34 [2022-11-03 02:39:04,819 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:04,820 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 31 treesize of output 26 [2022-11-03 02:39:05,055 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 2 proven. 25 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-03 02:39:05,056 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:39:05,212 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:05,212 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 24 [2022-11-03 02:39:05,772 WARN L833 $PredicateComparison]: unable to prove that (let ((.cse1 (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1))) (let ((.cse0 (forall ((v_ArrVal_1257 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (= 0 (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1257) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) .cse1))))) (and (or .cse0 (< |c_ULTIMATE.start_cstrncat_~s~0#1.offset| (+ |c_ULTIMATE.start_cstrncat_~d~0#1.offset| 1))) (or .cse0 (<= 0 (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2))) (forall ((v_ArrVal_1257 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (or (= 0 (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1257) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) .cse1)) (= |c_ULTIMATE.start_cstrncat_~s~0#1.base| |ULTIMATE.start_cstrncat_~d~0#1.base|)))))) is different from false [2022-11-03 02:39:06,440 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:06,440 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:39:06,454 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:06,454 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:39:06,460 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:39:06,473 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:06,473 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:39:06,475 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:39:06,482 INFO L356 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-03 02:39:06,482 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 11 [2022-11-03 02:39:06,877 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 1 proven. 23 refuted. 1 times theorem prover too weak. 16 trivial. 2 not checked. [2022-11-03 02:39:06,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [616632451] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:39:06,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [670361130] [2022-11-03 02:39:06,879 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:39:06,879 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:39:06,880 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:39:06,880 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:39:06,880 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:39:06,923 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:39:06,926 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:39:06,927 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:39:06,970 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:07,007 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:07,033 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:39:07,097 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:39:07,097 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:39:07,155 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:07,177 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:07,294 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:39:07,294 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:39:07,462 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:39:07,462 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:39:08,214 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:39:08,230 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:39:08,298 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:39:08,298 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:39:08,427 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:39:08,427 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:39:08,619 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:39:08,619 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:39:08,743 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:39:08,744 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:39:08,865 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:39:08,875 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:39:16,187 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14504#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:39:16,187 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:39:16,187 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:39:16,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 22, 23] total 57 [2022-11-03 02:39:16,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648262484] [2022-11-03 02:39:16,188 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:39:16,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-03 02:39:16,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:16,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-03 02:39:16,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=273, Invalid=4695, Unknown=6, NotChecked=138, Total=5112 [2022-11-03 02:39:16,190 INFO L87 Difference]: Start difference. First operand 292 states and 345 transitions. Second operand has 57 states, 57 states have (on average 1.7894736842105263) internal successors, (102), 57 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:17,876 WARN L833 $PredicateComparison]: unable to prove that (let ((.cse1 (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1))) (let ((.cse0 (forall ((v_ArrVal_1257 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (= 0 (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1257) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) .cse1))))) (and (<= |c_ULTIMATE.start_cstrncat_~n#1| 2) (<= 1 |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |c_ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= 1 |c_ULTIMATE.start_cstrncat_~d~0#1.offset|) (exists ((|ULTIMATE.start_main_~length2~0#1| Int)) (and (<= |ULTIMATE.start_main_~length2~0#1| 3) (< 2 |ULTIMATE.start_main_~length2~0#1|) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_main_~length2~0#1| (- 2) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0))) (or .cse0 (< |c_ULTIMATE.start_cstrncat_~s~0#1.offset| (+ |c_ULTIMATE.start_cstrncat_~d~0#1.offset| 1))) (or .cse0 (<= 0 (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2))) (<= |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= (+ |c_ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |c_#length| |c_ULTIMATE.start_cstrncat_#t~post5#1.base|)) (forall ((v_ArrVal_1257 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (or (= 0 (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1257) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) .cse1)) (= |c_ULTIMATE.start_cstrncat_~s~0#1.base| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 1 |c_ULTIMATE.start_cstrncat_~n#1|)))) is different from false [2022-11-03 02:39:17,942 WARN L833 $PredicateComparison]: unable to prove that (let ((.cse1 (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1))) (let ((.cse0 (forall ((v_ArrVal_1257 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (= 0 (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1257) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) .cse1))))) (and (<= 1 |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |c_ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= 1 |c_ULTIMATE.start_cstrncat_~d~0#1.offset|) (exists ((|ULTIMATE.start_main_~length2~0#1| Int)) (and (<= |ULTIMATE.start_main_~length2~0#1| 3) (< 2 |ULTIMATE.start_main_~length2~0#1|) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_main_~length2~0#1| (- 2) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|)) 0))) (or .cse0 (< |c_ULTIMATE.start_cstrncat_~s~0#1.offset| (+ |c_ULTIMATE.start_cstrncat_~d~0#1.offset| 1))) (or .cse0 (<= 0 (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2))) (<= |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= (+ |c_ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |c_#length| |c_ULTIMATE.start_cstrncat_#t~post5#1.base|)) (forall ((v_ArrVal_1257 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (or (= 0 (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1257) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) .cse1)) (= |c_ULTIMATE.start_cstrncat_~s~0#1.base| |ULTIMATE.start_cstrncat_~d~0#1.base|)))))) is different from false [2022-11-03 02:39:18,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:39:18,724 INFO L93 Difference]: Finished difference Result 371 states and 422 transitions. [2022-11-03 02:39:18,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2022-11-03 02:39:18,725 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 1.7894736842105263) internal successors, (102), 57 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-03 02:39:18,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:39:18,726 INFO L225 Difference]: With dead ends: 371 [2022-11-03 02:39:18,726 INFO L226 Difference]: Without dead ends: 325 [2022-11-03 02:39:18,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 65 SyntacticMatches, 1 SemanticMatches, 113 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 3652 ImplicationChecksByTransitivity, 11.5s TimeCoverageRelationStatistics Valid=698, Invalid=11738, Unknown=8, NotChecked=666, Total=13110 [2022-11-03 02:39:18,728 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 150 mSDsluCounter, 518 mSDsCounter, 0 mSdLazyCounter, 787 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 1493 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 787 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 669 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-03 02:39:18,728 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 487 Invalid, 1493 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 787 Invalid, 0 Unknown, 669 Unchecked, 0.5s Time] [2022-11-03 02:39:18,729 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-11-03 02:39:18,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 223. [2022-11-03 02:39:18,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 220 states have (on average 1.1681818181818182) internal successors, (257), 222 states have internal predecessors, (257), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:18,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 257 transitions. [2022-11-03 02:39:18,735 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 257 transitions. Word has length 40 [2022-11-03 02:39:18,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:39:18,735 INFO L495 AbstractCegarLoop]: Abstraction has 223 states and 257 transitions. [2022-11-03 02:39:18,735 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 1.7894736842105263) internal successors, (102), 57 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:39:18,735 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 257 transitions. [2022-11-03 02:39:18,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-03 02:39:18,736 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:39:18,736 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:39:18,771 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-11-03 02:39:18,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:39:18,949 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:39:18,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:39:18,950 INFO L85 PathProgramCache]: Analyzing trace with hash 690576924, now seen corresponding path program 4 times [2022-11-03 02:39:18,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:39:18,950 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1294300400] [2022-11-03 02:39:18,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:39:18,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:39:18,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:19,961 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 16 proven. 53 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:39:19,961 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:39:19,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1294300400] [2022-11-03 02:39:19,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1294300400] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:39:19,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [192031684] [2022-11-03 02:39:19,962 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:39:19,962 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:39:19,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:39:19,963 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:39:19,992 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-03 02:39:20,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:39:20,257 INFO L263 TraceCheckSpWp]: Trace formula consists of 305 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-03 02:39:20,260 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:39:20,303 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:39:20,912 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:39:20,998 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:39:27,405 INFO L356 Elim1Store]: treesize reduction 12, result has 70.7 percent of original size [2022-11-03 02:39:27,405 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 51 treesize of output 47 [2022-11-03 02:39:27,606 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 5 proven. 56 refuted. 9 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:27,606 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:39:28,588 WARN L833 $PredicateComparison]: unable to prove that (or (= (mod (+ |c_ULTIMATE.start_main_~n~0#1| 4294967295) 4294967296) 0) (forall ((v_ArrVal_1312 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1312) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0))))) is different from false [2022-11-03 02:39:28,602 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:28,602 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 105 treesize of output 63 [2022-11-03 02:39:28,630 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:28,631 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 115 treesize of output 121 [2022-11-03 02:39:28,671 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:39:28,672 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 45 treesize of output 29 [2022-11-03 02:39:30,405 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:39:30,475 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 26 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:39:30,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [192031684] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:39:30,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [646472920] [2022-11-03 02:39:30,476 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:39:30,476 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:39:30,476 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:39:30,477 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:39:30,477 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:39:30,512 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:39:30,516 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:39:30,517 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:39:30,559 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:39:30,598 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:30,624 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:30,672 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:39:30,728 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:30,754 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:39:30,893 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:39:30,893 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:39:31,119 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:39:31,120 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:39:32,193 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:39:32,204 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:39:32,304 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:39:32,304 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:39:32,464 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:39:32,464 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:39:32,691 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:39:32,691 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:39:32,853 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:39:32,854 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:39:32,992 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:39:33,009 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:39:40,649 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15509#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:39:40,649 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:39:40,649 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:39:40,649 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 24, 24] total 66 [2022-11-03 02:39:40,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1342551654] [2022-11-03 02:39:40,649 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:39:40,650 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-03 02:39:40,650 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:39:40,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-03 02:39:40,651 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=414, Invalid=5896, Unknown=14, NotChecked=156, Total=6480 [2022-11-03 02:39:40,652 INFO L87 Difference]: Start difference. First operand 223 states and 257 transitions. Second operand has 66 states, 66 states have (on average 1.8181818181818181) internal successors, (120), 66 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:28,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:28,529 INFO L93 Difference]: Finished difference Result 328 states and 381 transitions. [2022-11-03 02:40:28,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-11-03 02:40:28,529 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 1.8181818181818181) internal successors, (120), 66 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-03 02:40:28,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:28,532 INFO L225 Difference]: With dead ends: 328 [2022-11-03 02:40:28,532 INFO L226 Difference]: Without dead ends: 305 [2022-11-03 02:40:28,533 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 124 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 4267 ImplicationChecksByTransitivity, 63.9s TimeCoverageRelationStatistics Valid=1158, Invalid=14264, Unknown=82, NotChecked=246, Total=15750 [2022-11-03 02:40:28,533 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 156 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 904 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 274 SdHoareTripleChecker+Invalid, 1184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 904 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 228 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:28,534 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 274 Invalid, 1184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 904 Invalid, 0 Unknown, 228 Unchecked, 0.8s Time] [2022-11-03 02:40:28,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2022-11-03 02:40:28,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 244. [2022-11-03 02:40:28,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 241 states have (on average 1.1784232365145229) internal successors, (284), 243 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:28,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 284 transitions. [2022-11-03 02:40:28,541 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 284 transitions. Word has length 41 [2022-11-03 02:40:28,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:28,541 INFO L495 AbstractCegarLoop]: Abstraction has 244 states and 284 transitions. [2022-11-03 02:40:28,542 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 1.8181818181818181) internal successors, (120), 66 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:28,542 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 284 transitions. [2022-11-03 02:40:28,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-03 02:40:28,543 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:28,543 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:28,584 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:28,757 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-03 02:40:28,758 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:40:28,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:28,758 INFO L85 PathProgramCache]: Analyzing trace with hash 638581688, now seen corresponding path program 7 times [2022-11-03 02:40:28,758 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:28,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612003926] [2022-11-03 02:40:28,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:28,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:28,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:30,374 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 10 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:40:30,374 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:30,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612003926] [2022-11-03 02:40:30,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612003926] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:30,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1765770593] [2022-11-03 02:40:30,374 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:40:30,374 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:30,375 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:30,376 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:30,377 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-03 02:40:30,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:30,604 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-03 02:40:30,607 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:40:30,628 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:40:31,431 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:40:31,528 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:40:33,054 INFO L356 Elim1Store]: treesize reduction 23, result has 54.9 percent of original size [2022-11-03 02:40:33,054 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 61 treesize of output 50 [2022-11-03 02:40:33,125 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 12 proven. 67 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:40:33,125 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:40:34,434 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:40:34,434 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 131 treesize of output 75 [2022-11-03 02:40:34,466 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:40:34,467 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 140 treesize of output 150 [2022-11-03 02:40:34,511 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 36 [2022-11-03 02:40:36,932 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:40:36,941 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 33 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:40:36,941 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1765770593] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:40:36,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2002434440] [2022-11-03 02:40:36,942 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:40:36,943 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:40:36,943 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:40:36,943 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:40:36,943 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:40:36,979 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:40:36,983 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:40:36,984 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:40:37,028 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:40:37,071 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:40:37,100 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:40:37,151 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:40:37,205 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:40:37,232 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:40:37,373 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:40:37,374 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:40:37,581 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:40:37,582 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:40:38,421 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:40:38,432 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:40:38,524 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:40:38,524 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:40:38,613 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:40:38,638 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:40:47,469 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16500#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:40:47,469 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:40:47,469 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:40:47,469 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 26, 26] total 71 [2022-11-03 02:40:47,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1576456196] [2022-11-03 02:40:47,470 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:40:47,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-11-03 02:40:47,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:47,471 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-11-03 02:40:47,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=379, Invalid=7103, Unknown=0, NotChecked=0, Total=7482 [2022-11-03 02:40:47,472 INFO L87 Difference]: Start difference. First operand 244 states and 284 transitions. Second operand has 72 states, 72 states have (on average 1.5416666666666667) internal successors, (111), 71 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:53,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:53,300 INFO L93 Difference]: Finished difference Result 250 states and 287 transitions. [2022-11-03 02:40:53,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-03 02:40:53,301 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 72 states have (on average 1.5416666666666667) internal successors, (111), 71 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-03 02:40:53,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:53,301 INFO L225 Difference]: With dead ends: 250 [2022-11-03 02:40:53,302 INFO L226 Difference]: Without dead ends: 220 [2022-11-03 02:40:53,302 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 180 GetRequests, 58 SyntacticMatches, 4 SemanticMatches, 118 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3577 ImplicationChecksByTransitivity, 19.0s TimeCoverageRelationStatistics Valid=819, Invalid=13461, Unknown=0, NotChecked=0, Total=14280 [2022-11-03 02:40:53,303 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 118 mSDsluCounter, 402 mSDsCounter, 0 mSdLazyCounter, 994 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 1266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 994 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 216 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:53,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 367 Invalid, 1266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 994 Invalid, 0 Unknown, 216 Unchecked, 0.8s Time] [2022-11-03 02:40:53,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-11-03 02:40:53,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 190. [2022-11-03 02:40:53,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 187 states have (on average 1.1711229946524064) internal successors, (219), 189 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:53,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 219 transitions. [2022-11-03 02:40:53,308 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 219 transitions. Word has length 41 [2022-11-03 02:40:53,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:53,309 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 219 transitions. [2022-11-03 02:40:53,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 72 states have (on average 1.5416666666666667) internal successors, (111), 71 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:40:53,309 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 219 transitions. [2022-11-03 02:40:53,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-03 02:40:53,310 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:53,310 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:53,361 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-03 02:40:53,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:53,538 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:40:53,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:53,538 INFO L85 PathProgramCache]: Analyzing trace with hash -2031544723, now seen corresponding path program 4 times [2022-11-03 02:40:53,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:53,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923439836] [2022-11-03 02:40:53,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:53,539 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:53,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:56,771 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 13 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:40:56,772 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:56,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923439836] [2022-11-03 02:40:56,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923439836] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:56,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1479288991] [2022-11-03 02:40:56,772 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-03 02:40:56,772 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:56,773 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:56,775 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:56,782 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-03 02:40:56,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:56,994 INFO L263 TraceCheckSpWp]: Trace formula consists of 313 conjuncts, 66 conjunts are in the unsatisfiable core [2022-11-03 02:40:56,997 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:40:57,027 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:40:57,786 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:40:57,888 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:40:58,563 INFO L356 Elim1Store]: treesize reduction 4, result has 84.6 percent of original size [2022-11-03 02:40:58,563 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 32 [2022-11-03 02:40:58,800 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 2 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:40:58,800 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:40:59,742 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:40:59,743 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 53 treesize of output 39 [2022-11-03 02:40:59,761 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:40:59,761 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 69 [2022-11-03 02:40:59,771 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2022-11-03 02:41:01,459 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:41:01,522 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 14 proven. 40 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:41:01,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1479288991] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:41:01,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1641883181] [2022-11-03 02:41:01,524 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:41:01,524 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:41:01,525 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:41:01,525 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:41:01,525 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:41:01,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:41:01,581 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:41:01,582 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:41:01,615 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:41:01,656 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:01,688 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:01,739 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:41:01,802 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:01,831 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:01,994 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:41:01,994 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:41:02,265 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:41:02,266 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:41:03,070 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:41:03,084 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:41:03,174 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:41:03,174 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:41:03,321 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:41:03,322 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:41:03,543 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:41:03,544 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:41:03,701 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:41:03,702 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:41:03,911 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:41:03,928 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:41:12,695 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17335#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:41:12,695 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:41:12,695 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:41:12,695 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 23, 23] total 65 [2022-11-03 02:41:12,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1825110923] [2022-11-03 02:41:12,696 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:41:12,696 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-11-03 02:41:12,696 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:41:12,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-11-03 02:41:12,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=466, Invalid=6176, Unknown=0, NotChecked=0, Total=6642 [2022-11-03 02:41:12,698 INFO L87 Difference]: Start difference. First operand 190 states and 219 transitions. Second operand has 66 states, 66 states have (on average 1.7878787878787878) internal successors, (118), 65 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:41:16,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:41:16,897 INFO L93 Difference]: Finished difference Result 224 states and 258 transitions. [2022-11-03 02:41:16,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-03 02:41:16,898 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 1.7878787878787878) internal successors, (118), 65 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-03 02:41:16,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:41:16,898 INFO L225 Difference]: With dead ends: 224 [2022-11-03 02:41:16,898 INFO L226 Difference]: Without dead ends: 217 [2022-11-03 02:41:16,899 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 65 SyntacticMatches, 3 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3413 ImplicationChecksByTransitivity, 16.5s TimeCoverageRelationStatistics Valid=840, Invalid=9260, Unknown=0, NotChecked=0, Total=10100 [2022-11-03 02:41:16,899 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 108 mSDsluCounter, 373 mSDsCounter, 0 mSdLazyCounter, 607 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 754 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 607 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 113 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:41:16,900 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 352 Invalid, 754 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 607 Invalid, 0 Unknown, 113 Unchecked, 0.8s Time] [2022-11-03 02:41:16,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 217 states. [2022-11-03 02:41:16,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 217 to 213. [2022-11-03 02:41:16,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 210 states have (on average 1.1761904761904762) internal successors, (247), 212 states have internal predecessors, (247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:41:16,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 247 transitions. [2022-11-03 02:41:16,905 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 247 transitions. Word has length 42 [2022-11-03 02:41:16,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:41:16,906 INFO L495 AbstractCegarLoop]: Abstraction has 213 states and 247 transitions. [2022-11-03 02:41:16,906 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 1.7878787878787878) internal successors, (118), 65 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:41:16,906 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 247 transitions. [2022-11-03 02:41:16,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-03 02:41:16,907 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:41:16,907 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:41:16,954 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-03 02:41:17,121 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-11-03 02:41:17,121 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:41:17,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:41:17,122 INFO L85 PathProgramCache]: Analyzing trace with hash -522356581, now seen corresponding path program 8 times [2022-11-03 02:41:17,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:41:17,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2069208375] [2022-11-03 02:41:17,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:41:17,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:41:17,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:41:18,212 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 25 proven. 66 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-03 02:41:18,212 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:41:18,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2069208375] [2022-11-03 02:41:18,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2069208375] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:41:18,213 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [895115780] [2022-11-03 02:41:18,213 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:41:18,213 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:41:18,213 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:41:18,214 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:41:18,215 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-03 02:41:18,626 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-03 02:41:18,626 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:41:18,631 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 112 conjunts are in the unsatisfiable core [2022-11-03 02:41:18,634 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:41:18,704 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:41:18,712 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:41:19,699 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-03 02:41:19,866 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 30 [2022-11-03 02:41:41,518 INFO L356 Elim1Store]: treesize reduction 16, result has 86.2 percent of original size [2022-11-03 02:41:41,518 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 2 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 10 case distinctions, treesize of input 68 treesize of output 125 [2022-11-03 02:41:42,641 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 11 proven. 67 refuted. 1 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-03 02:41:42,641 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:41:48,533 INFO L356 Elim1Store]: treesize reduction 160, result has 24.2 percent of original size [2022-11-03 02:41:48,534 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 236 treesize of output 252 [2022-11-03 02:41:48,558 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:41:48,558 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 60 treesize of output 56 [2022-11-03 02:41:48,585 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-11-03 02:41:48,606 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:41:48,610 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:41:48,667 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:41:48,667 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 5 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 10 case distinctions, treesize of input 59 treesize of output 134 [2022-11-03 02:41:57,099 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:41:57,111 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:41:57,543 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 16 proven. 71 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-03 02:41:57,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [895115780] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:41:57,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [192108363] [2022-11-03 02:41:57,544 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:41:57,545 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:41:57,545 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:41:57,545 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:41:57,545 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:41:57,587 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:41:57,590 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:41:57,591 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:41:57,623 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:57,659 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:57,684 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:41:57,736 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:41:57,736 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:41:57,787 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:57,814 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:41:57,922 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:41:57,922 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:41:58,091 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:41:58,092 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:41:58,787 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:41:58,801 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:41:58,875 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:41:58,876 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:41:58,947 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:41:58,959 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:42:05,521 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18154#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:42:05,521 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:42:05,521 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:42:05,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 26, 27] total 74 [2022-11-03 02:42:05,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1171506426] [2022-11-03 02:42:05,522 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:42:05,522 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-11-03 02:42:05,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:05,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-11-03 02:42:05,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=585, Invalid=7417, Unknown=8, NotChecked=0, Total=8010 [2022-11-03 02:42:05,523 INFO L87 Difference]: Start difference. First operand 213 states and 247 transitions. Second operand has 75 states, 74 states have (on average 1.6486486486486487) internal successors, (122), 75 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:42:25,707 WARN L234 SmtUtils]: Spent 9.12s on a formula simplification. DAG size of input: 78 DAG size of output: 75 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:42:48,673 WARN L234 SmtUtils]: Spent 6.15s on a formula simplification that was a NOOP. DAG size: 90 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:43:01,526 WARN L234 SmtUtils]: Spent 6.06s on a formula simplification that was a NOOP. DAG size: 75 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:43:17,119 WARN L234 SmtUtils]: Spent 8.16s on a formula simplification that was a NOOP. DAG size: 88 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:43:50,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:43:50,201 INFO L93 Difference]: Finished difference Result 267 states and 312 transitions. [2022-11-03 02:43:50,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 70 states. [2022-11-03 02:43:50,206 INFO L78 Accepts]: Start accepts. Automaton has has 75 states, 74 states have (on average 1.6486486486486487) internal successors, (122), 75 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-11-03 02:43:50,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:43:50,207 INFO L225 Difference]: With dead ends: 267 [2022-11-03 02:43:50,207 INFO L226 Difference]: Without dead ends: 257 [2022-11-03 02:43:50,209 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 59 SyntacticMatches, 4 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6080 ImplicationChecksByTransitivity, 140.1s TimeCoverageRelationStatistics Valid=1943, Invalid=19496, Unknown=23, NotChecked=0, Total=21462 [2022-11-03 02:43:50,209 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 66 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 821 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 36 SdHoareTripleChecker+Invalid, 1535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 821 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 690 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:43:50,210 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 36 Invalid, 1535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 821 Invalid, 0 Unknown, 690 Unchecked, 0.8s Time] [2022-11-03 02:43:50,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2022-11-03 02:43:50,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 243. [2022-11-03 02:43:50,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 240 states have (on average 1.1916666666666667) internal successors, (286), 242 states have internal predecessors, (286), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:43:50,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 286 transitions. [2022-11-03 02:43:50,215 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 286 transitions. Word has length 43 [2022-11-03 02:43:50,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:43:50,215 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 286 transitions. [2022-11-03 02:43:50,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 75 states, 74 states have (on average 1.6486486486486487) internal successors, (122), 75 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:43:50,216 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 286 transitions. [2022-11-03 02:43:50,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-03 02:43:50,217 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:43:50,217 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:43:50,259 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-03 02:43:50,429 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-03 02:43:50,430 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:43:50,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:43:50,430 INFO L85 PathProgramCache]: Analyzing trace with hash 634074602, now seen corresponding path program 5 times [2022-11-03 02:43:50,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:43:50,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [46038579] [2022-11-03 02:43:50,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:43:50,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:43:50,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:43:51,232 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 16 proven. 45 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:43:51,233 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:43:51,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [46038579] [2022-11-03 02:43:51,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [46038579] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:43:51,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [152017317] [2022-11-03 02:43:51,233 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:43:51,233 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:43:51,234 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:43:51,234 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:43:51,236 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-03 02:43:51,693 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:43:51,694 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:43:51,697 INFO L263 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 99 conjunts are in the unsatisfiable core [2022-11-03 02:43:51,701 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:43:51,745 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:43:51,750 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-11-03 02:43:52,395 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-11-03 02:43:52,519 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 25 [2022-11-03 02:44:02,414 INFO L356 Elim1Store]: treesize reduction 4, result has 90.2 percent of original size [2022-11-03 02:44:02,414 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 47 [2022-11-03 02:44:03,922 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 12 proven. 27 refuted. 1 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:44:03,923 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:44:05,493 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((|v_ULTIMATE.start_cstrncat_~d~0#1.offset_355| Int) (|v_ULTIMATE.start_cstrncat_~d~0#1.offset_354| Int) (v_ArrVal_1552 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1552) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (not (<= |v_ULTIMATE.start_cstrncat_~d~0#1.offset_354| (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_355| 1))) (= (select .cse0 |v_ULTIMATE.start_cstrncat_~d~0#1.offset_355|) 0) (< (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_354| 2) 0) (= (select .cse0 |v_ULTIMATE.start_cstrncat_~d~0#1.offset_354|) 0) (< (+ |v_ULTIMATE.start_cstrncat_~d~0#1.offset_354| 3) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (< (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) |v_ULTIMATE.start_cstrncat_~d~0#1.offset_355|)))) (= (mod (+ |c_ULTIMATE.start_main_~n~0#1| 4294967295) 4294967296) 0)) is different from false [2022-11-03 02:44:05,515 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:44:05,516 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 35 [2022-11-03 02:44:05,543 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:44:05,544 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 57 treesize of output 73 [2022-11-03 02:44:05,563 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:44:05,564 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 23 [2022-11-03 02:44:07,745 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:44:07,756 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:44:07,872 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 4 proven. 41 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-03 02:44:07,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [152017317] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:44:07,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [869299792] [2022-11-03 02:44:07,873 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:44:07,873 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:44:07,873 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:44:07,874 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:44:07,874 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:44:07,907 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:44:07,911 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:44:07,911 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:44:07,957 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:44:07,992 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:08,019 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:44:08,079 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:44:08,080 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:44:08,141 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:08,165 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:08,293 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:44:08,294 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:44:08,512 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:44:08,513 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:44:09,223 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:44:09,250 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:44:09,319 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:44:09,319 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:44:09,452 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:44:09,453 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:44:09,628 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:44:09,629 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:44:09,775 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:44:09,775 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:44:09,937 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:44:09,947 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:44:17,249 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19116#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_190| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_189| Int)) (and (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_190|) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_190|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_189|) 0)) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_190|) 1) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_189| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_190|)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_189|) (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_190|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_189|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))))) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:44:17,249 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:44:17,249 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:44:17,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 21, 21] total 61 [2022-11-03 02:44:17,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1644433131] [2022-11-03 02:44:17,250 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:44:17,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-11-03 02:44:17,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:44:17,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-11-03 02:44:17,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=5413, Unknown=5, NotChecked=150, Total=6006 [2022-11-03 02:44:17,251 INFO L87 Difference]: Start difference. First operand 243 states and 286 transitions. Second operand has 62 states, 61 states have (on average 1.8852459016393444) internal successors, (115), 62 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:44:30,665 WARN L234 SmtUtils]: Spent 8.41s on a formula simplification. DAG size of input: 97 DAG size of output: 88 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:47,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:44:47,700 INFO L93 Difference]: Finished difference Result 269 states and 312 transitions. [2022-11-03 02:44:47,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-11-03 02:44:47,701 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 1.8852459016393444) internal successors, (115), 62 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-03 02:44:47,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:44:47,701 INFO L225 Difference]: With dead ends: 269 [2022-11-03 02:44:47,701 INFO L226 Difference]: Without dead ends: 267 [2022-11-03 02:44:47,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 76 SyntacticMatches, 5 SemanticMatches, 131 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 4330 ImplicationChecksByTransitivity, 49.9s TimeCoverageRelationStatistics Valid=2159, Invalid=15131, Unknown=6, NotChecked=260, Total=17556 [2022-11-03 02:44:47,702 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 310 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 1119 mSolverCounterSat, 184 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 310 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 1837 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 184 IncrementalHoareTripleChecker+Valid, 1119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 534 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-03 02:44:47,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [310 Valid, 121 Invalid, 1837 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [184 Valid, 1119 Invalid, 0 Unknown, 534 Unchecked, 1.2s Time] [2022-11-03 02:44:47,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2022-11-03 02:44:47,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 253. [2022-11-03 02:44:47,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 250 states have (on average 1.184) internal successors, (296), 252 states have internal predecessors, (296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:44:47,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 296 transitions. [2022-11-03 02:44:47,709 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 296 transitions. Word has length 44 [2022-11-03 02:44:47,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:44:47,709 INFO L495 AbstractCegarLoop]: Abstraction has 253 states and 296 transitions. [2022-11-03 02:44:47,709 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 1.8852459016393444) internal successors, (115), 62 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:44:47,709 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 296 transitions. [2022-11-03 02:44:47,710 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-03 02:44:47,710 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:44:47,710 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:44:47,750 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-03 02:44:47,928 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-11-03 02:44:47,928 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:44:47,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:44:47,929 INFO L85 PathProgramCache]: Analyzing trace with hash -1167360787, now seen corresponding path program 6 times [2022-11-03 02:44:47,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:44:47,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697482018] [2022-11-03 02:44:47,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:44:47,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:44:47,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:44:49,303 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 17 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-03 02:44:49,303 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:44:49,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697482018] [2022-11-03 02:44:49,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697482018] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:44:49,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2128093109] [2022-11-03 02:44:49,304 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:44:49,304 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:44:49,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:44:49,305 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:44:49,307 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-03 02:44:49,639 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:44:49,639 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:44:49,642 INFO L263 TraceCheckSpWp]: Trace formula consists of 334 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-03 02:44:49,645 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:44:49,651 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:44:49,907 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:44:50,221 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:44:50,360 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-03 02:44:50,532 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:44:50,535 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:44:50,535 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-11-03 02:44:50,580 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 2 proven. 17 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2022-11-03 02:44:50,580 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:44:50,688 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1615 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1615) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-03 02:44:50,697 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1615 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1615) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:44:50,716 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1615 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1615) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2)) 0)) is different from false [2022-11-03 02:44:50,746 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1615 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_1615) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~src#1.offset|)) 0)) is different from false [2022-11-03 02:44:50,754 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:44:50,754 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-03 02:44:50,761 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:44:50,762 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-03 02:44:50,771 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-03 02:44:51,074 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 37 trivial. 12 not checked. [2022-11-03 02:44:51,074 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2128093109] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:44:51,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [78488332] [2022-11-03 02:44:51,078 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-11-03 02:44:51,078 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:44:51,078 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:44:51,079 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:44:51,079 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:44:51,119 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:44:51,122 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:44:51,123 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:44:51,153 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:51,202 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:51,228 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:44:51,286 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:44:51,286 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:44:51,340 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:51,364 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:44:51,465 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:44:51,466 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:44:51,660 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:44:51,661 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:44:52,364 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:44:52,374 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:44:52,463 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:44:52,464 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:44:52,602 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:44:52,603 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:44:52,768 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:44:52,769 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:44:52,900 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:44:52,900 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:44:53,058 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:44:53,070 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:45:00,169 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20083#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (exists ((|v_ULTIMATE.start_cstrncat_#t~post5#1.base_201| Int) (|v_ULTIMATE.start_cstrncat_#t~post5#1.offset_200| Int)) (and (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.base_201|) (<= (+ |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_200| 1) (select |#length| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_201|)) (= (select |#valid| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_201|) 1) (not (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_201|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_200|) 0)) (<= 0 |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_200|) (= (select (select |#memory_int| |v_ULTIMATE.start_cstrncat_#t~post5#1.base_201|) |v_ULTIMATE.start_cstrncat_#t~post5#1.offset_200|) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:45:00,169 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:45:00,169 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:45:00,169 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 15, 15] total 47 [2022-11-03 02:45:00,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141724528] [2022-11-03 02:45:00,170 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:45:00,170 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-03 02:45:00,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:45:00,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-03 02:45:00,171 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=222, Invalid=3212, Unknown=4, NotChecked=468, Total=3906 [2022-11-03 02:45:00,171 INFO L87 Difference]: Start difference. First operand 253 states and 296 transitions. Second operand has 47 states, 47 states have (on average 2.1702127659574466) internal successors, (102), 47 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:45:04,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:45:04,430 INFO L93 Difference]: Finished difference Result 437 states and 491 transitions. [2022-11-03 02:45:04,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2022-11-03 02:45:04,431 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.1702127659574466) internal successors, (102), 47 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-03 02:45:04,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:45:04,432 INFO L225 Difference]: With dead ends: 437 [2022-11-03 02:45:04,432 INFO L226 Difference]: Without dead ends: 375 [2022-11-03 02:45:04,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 95 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 4 IntricatePredicates, 2 DeprecatedPredicates, 2800 ImplicationChecksByTransitivity, 12.0s TimeCoverageRelationStatistics Valid=677, Invalid=9636, Unknown=5, NotChecked=812, Total=11130 [2022-11-03 02:45:04,434 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 146 mSDsluCounter, 901 mSDsCounter, 0 mSdLazyCounter, 802 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 146 SdHoareTripleChecker+Valid, 866 SdHoareTripleChecker+Invalid, 1774 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 802 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 918 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:45:04,434 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [146 Valid, 866 Invalid, 1774 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 802 Invalid, 0 Unknown, 918 Unchecked, 0.6s Time] [2022-11-03 02:45:04,435 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2022-11-03 02:45:04,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 299. [2022-11-03 02:45:04,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 296 states have (on average 1.1824324324324325) internal successors, (350), 298 states have internal predecessors, (350), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:45:04,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 350 transitions. [2022-11-03 02:45:04,440 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 350 transitions. Word has length 45 [2022-11-03 02:45:04,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:45:04,441 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 350 transitions. [2022-11-03 02:45:04,441 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.1702127659574466) internal successors, (102), 47 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:45:04,441 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 350 transitions. [2022-11-03 02:45:04,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-03 02:45:04,442 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:45:04,442 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:45:04,478 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-03 02:45:04,661 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-03 02:45:04,661 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:45:04,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:45:04,662 INFO L85 PathProgramCache]: Analyzing trace with hash -539624139, now seen corresponding path program 5 times [2022-11-03 02:45:04,662 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:45:04,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1823813641] [2022-11-03 02:45:04,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:04,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:45:04,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:05,559 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 16 proven. 51 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-03 02:45:05,559 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:45:05,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1823813641] [2022-11-03 02:45:05,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1823813641] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:45:05,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1405617100] [2022-11-03 02:45:05,559 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-03 02:45:05,560 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:05,560 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:45:05,560 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:45:05,562 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-03 02:45:05,913 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-03 02:45:05,913 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:45:05,917 INFO L263 TraceCheckSpWp]: Trace formula consists of 313 conjuncts, 104 conjunts are in the unsatisfiable core [2022-11-03 02:45:05,920 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:45:05,951 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:45:05,960 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-03 02:45:06,751 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-11-03 02:45:06,856 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 27 [2022-11-03 02:45:07,440 INFO L356 Elim1Store]: treesize reduction 4, result has 90.5 percent of original size [2022-11-03 02:45:07,441 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 48 [2022-11-03 02:45:08,352 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 11 proven. 35 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:45:08,352 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:45:09,979 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:45:09,979 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-11-03 02:45:09,998 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:45:09,999 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 61 treesize of output 74 [2022-11-03 02:45:10,013 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:45:10,013 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 25 [2022-11-03 02:45:12,695 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:45:12,704 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:45:12,835 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 0 proven. 46 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:45:12,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1405617100] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:45:12,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [300537913] [2022-11-03 02:45:12,837 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:45:12,837 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:45:12,837 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:45:12,837 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:45:12,837 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:45:12,874 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:45:12,877 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:45:12,877 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:45:12,909 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:45:12,946 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:45:12,972 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:45:13,020 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:45:13,062 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:45:13,088 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:45:13,187 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:45:13,187 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:45:13,358 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:45:13,359 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:45:14,056 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:45:14,070 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:45:14,145 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:45:14,145 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:45:14,272 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:45:14,272 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:45:14,437 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:45:14,438 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:45:14,580 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:45:14,580 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:45:14,707 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:45:14,720 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:45:21,949 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21264#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:45:21,949 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:45:21,949 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:45:21,949 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 26, 24] total 69 [2022-11-03 02:45:21,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530747744] [2022-11-03 02:45:21,949 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:45:21,950 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-11-03 02:45:21,950 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:45:21,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-11-03 02:45:21,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=502, Invalid=6638, Unknown=0, NotChecked=0, Total=7140 [2022-11-03 02:45:21,951 INFO L87 Difference]: Start difference. First operand 299 states and 350 transitions. Second operand has 70 states, 69 states have (on average 1.7391304347826086) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:45:31,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:45:31,313 INFO L93 Difference]: Finished difference Result 355 states and 404 transitions. [2022-11-03 02:45:31,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 84 states. [2022-11-03 02:45:31,314 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 69 states have (on average 1.7391304347826086) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-03 02:45:31,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:45:31,315 INFO L225 Difference]: With dead ends: 355 [2022-11-03 02:45:31,315 INFO L226 Difference]: Without dead ends: 316 [2022-11-03 02:45:31,317 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 237 GetRequests, 84 SyntacticMatches, 6 SemanticMatches, 147 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5822 ImplicationChecksByTransitivity, 19.6s TimeCoverageRelationStatistics Valid=1981, Invalid=20071, Unknown=0, NotChecked=0, Total=22052 [2022-11-03 02:45:31,317 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 325 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 1754 mSolverCounterSat, 173 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 325 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 2496 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 173 IncrementalHoareTripleChecker+Valid, 1754 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 569 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-03 02:45:31,318 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [325 Valid, 295 Invalid, 2496 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [173 Valid, 1754 Invalid, 0 Unknown, 569 Unchecked, 1.6s Time] [2022-11-03 02:45:31,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-11-03 02:45:31,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 271. [2022-11-03 02:45:31,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 268 states have (on average 1.1902985074626866) internal successors, (319), 270 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:45:31,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 319 transitions. [2022-11-03 02:45:31,324 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 319 transitions. Word has length 46 [2022-11-03 02:45:31,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:45:31,324 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 319 transitions. [2022-11-03 02:45:31,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 69 states have (on average 1.7391304347826086) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:45:31,325 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 319 transitions. [2022-11-03 02:45:31,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 02:45:31,325 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:45:31,325 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:45:31,366 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-03 02:45:31,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-03 02:45:31,538 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:45:31,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:45:31,539 INFO L85 PathProgramCache]: Analyzing trace with hash 769738381, now seen corresponding path program 6 times [2022-11-03 02:45:31,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:45:31,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773259510] [2022-11-03 02:45:31,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:45:31,539 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:45:31,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:45:35,315 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 35 proven. 72 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-03 02:45:35,316 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:45:35,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773259510] [2022-11-03 02:45:35,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773259510] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:45:35,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1090310615] [2022-11-03 02:45:35,316 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:45:35,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:45:35,316 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:45:35,317 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:45:35,318 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-03 02:45:35,560 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:45:35,560 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:45:35,563 INFO L263 TraceCheckSpWp]: Trace formula consists of 340 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-03 02:45:35,566 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:45:35,615 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:45:36,304 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-03 02:45:36,385 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-11-03 02:45:59,400 INFO L356 Elim1Store]: treesize reduction 27, result has 55.7 percent of original size [2022-11-03 02:45:59,400 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 1 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 71 treesize of output 60 [2022-11-03 02:45:59,472 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 21 proven. 64 refuted. 21 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:45:59,472 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:46:00,760 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1739 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1739) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (= (select .cse0 (+ 6 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 5 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)))) is different from false [2022-11-03 02:46:00,768 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:46:00,769 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 157 treesize of output 87 [2022-11-03 02:46:00,800 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:46:00,801 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 165 treesize of output 179 [2022-11-03 02:46:00,809 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:46:00,809 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 67 treesize of output 43 [2022-11-03 02:46:03,053 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-03 02:46:03,055 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-03 02:46:03,097 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 45 proven. 61 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-03 02:46:03,097 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1090310615] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:46:03,097 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1549593590] [2022-11-03 02:46:03,098 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:46:03,098 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:46:03,098 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:46:03,098 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:46:03,098 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:46:03,131 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:46:03,135 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:46:03,136 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:46:03,186 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:46:03,222 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:46:03,246 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:46:03,305 INFO L356 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-03 02:46:03,305 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-03 02:46:03,359 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:46:03,384 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:46:03,479 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:46:03,480 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:46:03,671 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:46:03,672 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:46:04,363 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:46:04,388 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-11-03 02:46:04,458 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:46:04,459 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:46:04,581 INFO L356 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-11-03 02:46:04,581 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-11-03 02:46:04,760 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:46:04,760 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:46:04,892 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:46:04,892 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:46:05,018 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:46:05,031 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:46:13,691 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22408#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:46:13,691 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:46:13,691 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:46:13,691 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 27, 27] total 80 [2022-11-03 02:46:13,691 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723008666] [2022-11-03 02:46:13,691 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:46:13,692 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 81 states [2022-11-03 02:46:13,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:46:13,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 81 interpolants. [2022-11-03 02:46:13,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=586, Invalid=8318, Unknown=30, NotChecked=186, Total=9120 [2022-11-03 02:46:13,693 INFO L87 Difference]: Start difference. First operand 271 states and 319 transitions. Second operand has 81 states, 81 states have (on average 1.5308641975308641) internal successors, (124), 80 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:47:06,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:47:06,119 INFO L93 Difference]: Finished difference Result 343 states and 398 transitions. [2022-11-03 02:47:06,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-03 02:47:06,119 INFO L78 Accepts]: Start accepts. Automaton has has 81 states, 81 states have (on average 1.5308641975308641) internal successors, (124), 80 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-03 02:47:06,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:47:06,121 INFO L225 Difference]: With dead ends: 343 [2022-11-03 02:47:06,121 INFO L226 Difference]: Without dead ends: 297 [2022-11-03 02:47:06,122 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 73 SyntacticMatches, 1 SemanticMatches, 134 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 5773 ImplicationChecksByTransitivity, 87.6s TimeCoverageRelationStatistics Valid=1484, Invalid=16555, Unknown=55, NotChecked=266, Total=18360 [2022-11-03 02:47:06,122 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 213 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 782 mSolverCounterSat, 112 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 1009 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 112 IncrementalHoareTripleChecker+Valid, 782 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 115 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-03 02:47:06,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [213 Valid, 195 Invalid, 1009 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [112 Valid, 782 Invalid, 0 Unknown, 115 Unchecked, 0.8s Time] [2022-11-03 02:47:06,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-11-03 02:47:06,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 291. [2022-11-03 02:47:06,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 288 states have (on average 1.1979166666666667) internal successors, (345), 290 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:47:06,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 345 transitions. [2022-11-03 02:47:06,128 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 345 transitions. Word has length 47 [2022-11-03 02:47:06,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:47:06,128 INFO L495 AbstractCegarLoop]: Abstraction has 291 states and 345 transitions. [2022-11-03 02:47:06,128 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 81 states, 81 states have (on average 1.5308641975308641) internal successors, (124), 80 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:47:06,128 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 345 transitions. [2022-11-03 02:47:06,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-03 02:47:06,129 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:47:06,129 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:47:06,170 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-03 02:47:06,345 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-03 02:47:06,345 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:47:06,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:47:06,346 INFO L85 PathProgramCache]: Analyzing trace with hash -1042380647, now seen corresponding path program 6 times [2022-11-03 02:47:06,346 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:47:06,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563005999] [2022-11-03 02:47:06,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:47:06,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:47:06,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:47:06,905 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 30 proven. 33 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-03 02:47:06,906 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:47:06,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [563005999] [2022-11-03 02:47:06,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [563005999] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:47:06,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1117857773] [2022-11-03 02:47:06,906 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-03 02:47:06,906 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:47:06,906 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:47:06,907 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:47:06,910 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-03 02:47:07,273 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-03 02:47:07,273 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-03 02:47:07,277 INFO L263 TraceCheckSpWp]: Trace formula consists of 353 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-03 02:47:07,279 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:47:07,503 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-03 02:47:07,797 INFO L356 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-11-03 02:47:07,797 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 32 treesize of output 42 [2022-11-03 02:47:07,810 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:47:07,811 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:47:07,812 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 10 [2022-11-03 02:47:08,041 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 26 [2022-11-03 02:47:08,180 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 26 [2022-11-03 02:47:08,320 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:47:08,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:47:08,323 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:47:08,323 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-11-03 02:47:08,356 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 11 proven. 36 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-03 02:47:08,356 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:47:08,435 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1810 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-03 02:47:08,442 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1810 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) 0)) is different from false [2022-11-03 02:47:08,457 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1810 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2)) 0)) is different from false [2022-11-03 02:47:08,466 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1810 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2)) 0)) (= |c_ULTIMATE.start_cstrncat_#t~mem6#1| 0)) is different from false [2022-11-03 02:47:08,477 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1810 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2)) 0)) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_#t~post5#1.base|) |c_ULTIMATE.start_cstrncat_#t~post5#1.offset|) 0)) is different from false [2022-11-03 02:47:08,485 WARN L833 $PredicateComparison]: unable to prove that (or (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0) (forall ((v_ArrVal_1810 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 3)) 0))) is different from false [2022-11-03 02:47:08,552 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1810 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (or (= (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 3)) 0) (not (= (select (select |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) |c_ULTIMATE.start_cstrncat_~d~0#1.offset|) 0)))) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-11-03 02:47:08,562 WARN L833 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1810 (Array Int Int)) (|ULTIMATE.start_cstrncat_~d~0#1.base| Int)) (or (= (select (select (store |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_1810) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ 3 |c_ULTIMATE.start_cstrncat_~src#1.offset|)) 0) (not (= (select (select |c_#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) |c_ULTIMATE.start_cstrncat_~dst#1.offset|) 0)))) (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_~src#1.base|) |c_ULTIMATE.start_cstrncat_~src#1.offset|) 0)) is different from false [2022-11-03 02:47:08,594 INFO L356 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-11-03 02:47:08,594 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-11-03 02:47:08,614 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:47:08,614 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-11-03 02:47:08,622 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-03 02:47:08,648 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-11-03 02:47:08,673 INFO L356 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-03 02:47:08,673 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-11-03 02:47:09,261 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 11 proven. 10 refuted. 0 times theorem prover too weak. 25 trivial. 26 not checked. [2022-11-03 02:47:09,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1117857773] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:47:09,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [988553964] [2022-11-03 02:47:09,263 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-03 02:47:09,263 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:47:09,263 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:47:09,263 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:47:09,263 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:47:09,296 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:47:09,299 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-03 02:47:09,300 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-03 02:47:09,332 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:47:09,370 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:47:09,392 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:47:09,464 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-11-03 02:47:09,506 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:47:09,531 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-03 02:47:09,630 INFO L356 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-11-03 02:47:09,631 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-11-03 02:47:09,799 INFO L356 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-11-03 02:47:09,799 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-11-03 02:47:10,735 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:47:10,737 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:47:10,740 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-03 02:47:10,849 INFO L356 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-11-03 02:47:10,850 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1029 [2022-11-03 02:47:11,481 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:47:11,497 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:47:11,507 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-11-03 02:47:11,557 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:47:11,558 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:47:11,688 INFO L356 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-11-03 02:47:11,689 INFO L390 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-03 02:47:11,780 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-11-03 02:47:11,795 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:47:19,051 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23468#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-03 02:47:19,051 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-03 02:47:19,051 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:47:19,051 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 22, 21] total 55 [2022-11-03 02:47:19,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641127150] [2022-11-03 02:47:19,052 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-03 02:47:19,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-03 02:47:19,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:47:19,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-03 02:47:19,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=291, Invalid=3639, Unknown=8, NotChecked=1032, Total=4970 [2022-11-03 02:47:19,053 INFO L87 Difference]: Start difference. First operand 291 states and 345 transitions. Second operand has 55 states, 55 states have (on average 2.0) internal successors, (110), 55 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:47:22,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:47:22,208 INFO L93 Difference]: Finished difference Result 398 states and 474 transitions. [2022-11-03 02:47:22,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2022-11-03 02:47:22,209 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 2.0) internal successors, (110), 55 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-03 02:47:22,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:47:22,210 INFO L225 Difference]: With dead ends: 398 [2022-11-03 02:47:22,210 INFO L226 Difference]: Without dead ends: 359 [2022-11-03 02:47:22,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 86 SyntacticMatches, 8 SemanticMatches, 108 ConstructedPredicates, 8 IntricatePredicates, 0 DeprecatedPredicates, 3386 ImplicationChecksByTransitivity, 11.4s TimeCoverageRelationStatistics Valid=733, Invalid=9593, Unknown=8, NotChecked=1656, Total=11990 [2022-11-03 02:47:22,212 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 159 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 388 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 1363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 388 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 917 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-03 02:47:22,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [159 Valid, 215 Invalid, 1363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 388 Invalid, 0 Unknown, 917 Unchecked, 0.3s Time] [2022-11-03 02:47:22,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2022-11-03 02:47:22,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 312. [2022-11-03 02:47:22,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 312 states, 309 states have (on average 1.190938511326861) internal successors, (368), 311 states have internal predecessors, (368), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:47:22,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 312 states to 312 states and 368 transitions. [2022-11-03 02:47:22,218 INFO L78 Accepts]: Start accepts. Automaton has 312 states and 368 transitions. Word has length 47 [2022-11-03 02:47:22,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:47:22,218 INFO L495 AbstractCegarLoop]: Abstraction has 312 states and 368 transitions. [2022-11-03 02:47:22,218 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 2.0) internal successors, (110), 55 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:47:22,218 INFO L276 IsEmpty]: Start isEmpty. Operand 312 states and 368 transitions. [2022-11-03 02:47:22,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:47:22,219 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:47:22,219 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:47:22,261 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Ended with exit code 0 [2022-11-03 02:47:22,433 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9a4047a8-5c51-4f3e-9b85-1c851e38ebb9/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable50 [2022-11-03 02:47:22,433 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-11-03 02:47:22,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:47:22,434 INFO L85 PathProgramCache]: Analyzing trace with hash 1204309296, now seen corresponding path program 7 times [2022-11-03 02:47:22,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:47:22,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948200307] [2022-11-03 02:47:22,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:47:22,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:47:22,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat