./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 16:15:13,876 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 16:15:13,879 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 16:15:13,931 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 16:15:13,931 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 16:15:13,936 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 16:15:13,938 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 16:15:13,940 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 16:15:13,942 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 16:15:13,943 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 16:15:13,944 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 16:15:13,945 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 16:15:13,946 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 16:15:13,955 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 16:15:13,957 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 16:15:13,960 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 16:15:13,962 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 16:15:13,968 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 16:15:13,971 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 16:15:13,977 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 16:15:13,978 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 16:15:13,983 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 16:15:13,987 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 16:15:13,988 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 16:15:13,992 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 16:15:13,992 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 16:15:13,993 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 16:15:13,994 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 16:15:13,994 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 16:15:13,995 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 16:15:13,996 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 16:15:13,997 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 16:15:13,997 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 16:15:13,998 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 16:15:14,006 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 16:15:14,007 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 16:15:14,008 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 16:15:14,008 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 16:15:14,008 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 16:15:14,009 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 16:15:14,010 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 16:15:14,011 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-16 16:15:14,059 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 16:15:14,059 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 16:15:14,060 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 16:15:14,060 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 16:15:14,061 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 16:15:14,061 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 16:15:14,062 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-16 16:15:14,062 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-16 16:15:14,062 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-16 16:15:14,062 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-16 16:15:14,063 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-16 16:15:14,064 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-16 16:15:14,064 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-16 16:15:14,064 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-16 16:15:14,064 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-16 16:15:14,064 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-16 16:15:14,065 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-16 16:15:14,065 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-16 16:15:14,066 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 16:15:14,066 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 16:15:14,066 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 16:15:14,066 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 16:15:14,067 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-16 16:15:14,067 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 16:15:14,067 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 16:15:14,067 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 16:15:14,067 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-16 16:15:14,068 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-16 16:15:14,068 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-16 16:15:14,068 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 16:15:14,068 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-16 16:15:14,069 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 16:15:14,069 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 16:15:14,069 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 16:15:14,069 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 16:15:14,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 16:15:14,070 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 16:15:14,070 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-16 16:15:14,070 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 16:15:14,070 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-16 16:15:14,071 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 16:15:14,071 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-16 16:15:14,071 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e [2022-11-16 16:15:14,436 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 16:15:14,475 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 16:15:14,480 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 16:15:14,481 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 16:15:14,482 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 16:15:14,484 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-16 16:15:14,563 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/data/9904ba0da/e5a2bcf92d6b4507aba0e4e2ea2f5f78/FLAGdbf7d31ad [2022-11-16 16:15:15,261 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 16:15:15,262 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-11-16 16:15:15,277 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/data/9904ba0da/e5a2bcf92d6b4507aba0e4e2ea2f5f78/FLAGdbf7d31ad [2022-11-16 16:15:15,514 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/data/9904ba0da/e5a2bcf92d6b4507aba0e4e2ea2f5f78 [2022-11-16 16:15:15,517 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 16:15:15,518 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 16:15:15,523 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 16:15:15,523 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 16:15:15,531 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 16:15:15,532 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 04:15:15" (1/1) ... [2022-11-16 16:15:15,535 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@32d56cd6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:15, skipping insertion in model container [2022-11-16 16:15:15,535 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 04:15:15" (1/1) ... [2022-11-16 16:15:15,545 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 16:15:15,608 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 16:15:16,084 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 16:15:16,095 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 16:15:16,152 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 16:15:16,185 INFO L208 MainTranslator]: Completed translation [2022-11-16 16:15:16,186 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16 WrapperNode [2022-11-16 16:15:16,186 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 16:15:16,188 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 16:15:16,188 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 16:15:16,188 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 16:15:16,197 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,237 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,270 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-11-16 16:15:16,271 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 16:15:16,272 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 16:15:16,272 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 16:15:16,272 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 16:15:16,282 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,283 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,290 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,292 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,304 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,319 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,322 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,324 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,327 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 16:15:16,333 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 16:15:16,333 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 16:15:16,334 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 16:15:16,335 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (1/1) ... [2022-11-16 16:15:16,342 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 16:15:16,354 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:16,375 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 16:15:16,403 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 16:15:16,432 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-16 16:15:16,433 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-16 16:15:16,433 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-16 16:15:16,433 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-16 16:15:16,434 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 16:15:16,434 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 16:15:16,588 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 16:15:16,590 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 16:15:16,888 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 16:15:17,035 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 16:15:17,035 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-11-16 16:15:17,039 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 04:15:17 BoogieIcfgContainer [2022-11-16 16:15:17,039 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 16:15:17,042 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 16:15:17,042 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 16:15:17,047 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 16:15:17,047 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 04:15:15" (1/3) ... [2022-11-16 16:15:17,048 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b8800ed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 04:15:17, skipping insertion in model container [2022-11-16 16:15:17,048 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 04:15:16" (2/3) ... [2022-11-16 16:15:17,049 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b8800ed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 04:15:17, skipping insertion in model container [2022-11-16 16:15:17,049 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 04:15:17" (3/3) ... [2022-11-16 16:15:17,051 INFO L112 eAbstractionObserver]: Analyzing ICFG substring-alloca-2.i [2022-11-16 16:15:17,074 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 16:15:17,074 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-11-16 16:15:17,145 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 16:15:17,157 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@73ebfd53, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 16:15:17,157 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-11-16 16:15:17,162 INFO L276 IsEmpty]: Start isEmpty. Operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:17,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-16 16:15:17,173 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:17,174 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-16 16:15:17,175 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:17,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:17,185 INFO L85 PathProgramCache]: Analyzing trace with hash 158342, now seen corresponding path program 1 times [2022-11-16 16:15:17,196 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:17,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269402988] [2022-11-16 16:15:17,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:17,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:17,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:17,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:17,680 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:17,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269402988] [2022-11-16 16:15:17,682 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269402988] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:17,682 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:17,682 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-16 16:15:17,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [779357326] [2022-11-16 16:15:17,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:17,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 16:15:17,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:17,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 16:15:17,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 16:15:17,728 INFO L87 Difference]: Start difference. First operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:17,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:17,854 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-11-16 16:15:17,856 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 16:15:17,858 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-16 16:15:17,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:17,869 INFO L225 Difference]: With dead ends: 37 [2022-11-16 16:15:17,869 INFO L226 Difference]: Without dead ends: 36 [2022-11-16 16:15:17,872 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 16:15:17,878 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:17,879 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:17,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-16 16:15:17,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-16 16:15:17,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:17,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-11-16 16:15:17,969 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-11-16 16:15:17,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:17,970 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-11-16 16:15:17,970 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:17,972 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-11-16 16:15:17,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-16 16:15:17,973 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:17,973 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-16 16:15:17,974 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 16:15:17,975 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:17,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:17,991 INFO L85 PathProgramCache]: Analyzing trace with hash 158343, now seen corresponding path program 1 times [2022-11-16 16:15:17,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:17,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1858461785] [2022-11-16 16:15:17,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:17,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:18,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:18,413 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:18,413 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:18,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1858461785] [2022-11-16 16:15:18,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1858461785] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:18,414 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:18,414 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 16:15:18,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [613813380] [2022-11-16 16:15:18,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:18,416 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 16:15:18,416 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:18,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 16:15:18,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:18,417 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:18,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:18,626 INFO L93 Difference]: Finished difference Result 70 states and 80 transitions. [2022-11-16 16:15:18,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 16:15:18,628 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-16 16:15:18,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:18,632 INFO L225 Difference]: With dead ends: 70 [2022-11-16 16:15:18,632 INFO L226 Difference]: Without dead ends: 70 [2022-11-16 16:15:18,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:18,638 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 38 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:18,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 58 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 16:15:18,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-16 16:15:18,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 38. [2022-11-16 16:15:18,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 21 states have (on average 2.0952380952380953) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:18,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-11-16 16:15:18,646 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 3 [2022-11-16 16:15:18,646 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:18,647 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-11-16 16:15:18,647 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:18,647 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-11-16 16:15:18,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-16 16:15:18,648 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:18,648 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-16 16:15:18,648 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 16:15:18,649 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:18,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:18,649 INFO L85 PathProgramCache]: Analyzing trace with hash 5013776, now seen corresponding path program 1 times [2022-11-16 16:15:18,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:18,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272829007] [2022-11-16 16:15:18,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:18,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:18,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:18,872 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:18,872 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:18,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272829007] [2022-11-16 16:15:18,873 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272829007] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:18,873 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:18,873 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 16:15:18,873 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948948389] [2022-11-16 16:15:18,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:18,874 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 16:15:18,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:18,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 16:15:18,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:18,875 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:18,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:18,922 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-16 16:15:18,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 16:15:18,923 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-16 16:15:18,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:18,924 INFO L225 Difference]: With dead ends: 37 [2022-11-16 16:15:18,924 INFO L226 Difference]: Without dead ends: 37 [2022-11-16 16:15:18,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:18,926 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 39 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:18,927 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [39 Valid, 19 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:18,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-16 16:15:18,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-11-16 16:15:18,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:18,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-16 16:15:18,932 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 4 [2022-11-16 16:15:18,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:18,932 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-16 16:15:18,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:18,933 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-16 16:15:18,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-16 16:15:18,933 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:18,933 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-16 16:15:18,933 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 16:15:18,934 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:18,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:18,935 INFO L85 PathProgramCache]: Analyzing trace with hash 5011007, now seen corresponding path program 1 times [2022-11-16 16:15:18,935 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:18,935 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208603665] [2022-11-16 16:15:18,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:18,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:18,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:19,053 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:19,054 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:19,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208603665] [2022-11-16 16:15:19,054 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208603665] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:19,054 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:19,055 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-16 16:15:19,055 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [553980578] [2022-11-16 16:15:19,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:19,055 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 16:15:19,056 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:19,057 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 16:15:19,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 16:15:19,060 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:19,122 INFO L93 Difference]: Finished difference Result 35 states and 41 transitions. [2022-11-16 16:15:19,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 16:15:19,123 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-16 16:15:19,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:19,124 INFO L225 Difference]: With dead ends: 35 [2022-11-16 16:15:19,124 INFO L226 Difference]: Without dead ends: 35 [2022-11-16 16:15:19,126 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 16:15:19,132 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:19,132 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 18 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:19,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-16 16:15:19,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-16 16:15:19,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-11-16 16:15:19,137 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 4 [2022-11-16 16:15:19,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:19,137 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-11-16 16:15:19,137 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,138 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-11-16 16:15:19,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-16 16:15:19,138 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:19,138 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-16 16:15:19,138 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 16:15:19,139 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:19,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:19,139 INFO L85 PathProgramCache]: Analyzing trace with hash 5011008, now seen corresponding path program 1 times [2022-11-16 16:15:19,140 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:19,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1408575175] [2022-11-16 16:15:19,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:19,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:19,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:19,409 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:19,409 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:19,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1408575175] [2022-11-16 16:15:19,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1408575175] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:19,410 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:19,410 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:19,410 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300234202] [2022-11-16 16:15:19,410 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:19,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 16:15:19,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:19,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 16:15:19,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:19,415 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:19,548 INFO L93 Difference]: Finished difference Result 63 states and 73 transitions. [2022-11-16 16:15:19,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 16:15:19,548 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-16 16:15:19,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:19,549 INFO L225 Difference]: With dead ends: 63 [2022-11-16 16:15:19,549 INFO L226 Difference]: Without dead ends: 63 [2022-11-16 16:15:19,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-16 16:15:19,555 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 100 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:19,558 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [100 Valid, 51 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:19,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-11-16 16:15:19,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 37. [2022-11-16 16:15:19,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-11-16 16:15:19,573 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 4 [2022-11-16 16:15:19,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:19,575 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-11-16 16:15:19,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,578 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-11-16 16:15:19,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-16 16:15:19,581 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:19,582 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-16 16:15:19,582 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 16:15:19,582 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:19,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:19,583 INFO L85 PathProgramCache]: Analyzing trace with hash 155427050, now seen corresponding path program 1 times [2022-11-16 16:15:19,583 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:19,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134321800] [2022-11-16 16:15:19,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:19,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:19,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:19,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:19,866 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:19,866 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134321800] [2022-11-16 16:15:19,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1134321800] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:19,867 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:19,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:19,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [393264734] [2022-11-16 16:15:19,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:19,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 16:15:19,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:19,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 16:15:19,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:19,869 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:19,924 INFO L93 Difference]: Finished difference Result 36 states and 43 transitions. [2022-11-16 16:15:19,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 16:15:19,925 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-16 16:15:19,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:19,925 INFO L225 Difference]: With dead ends: 36 [2022-11-16 16:15:19,926 INFO L226 Difference]: Without dead ends: 36 [2022-11-16 16:15:19,926 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:19,927 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 70 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:19,928 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 17 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:19,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-16 16:15:19,931 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-11-16 16:15:19,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-11-16 16:15:19,932 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 5 [2022-11-16 16:15:19,933 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:19,933 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-11-16 16:15:19,933 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:19,934 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-11-16 16:15:19,934 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-16 16:15:19,934 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:19,934 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-11-16 16:15:19,935 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 16:15:19,935 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:19,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:19,936 INFO L85 PathProgramCache]: Analyzing trace with hash 152263501, now seen corresponding path program 1 times [2022-11-16 16:15:19,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:19,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779289306] [2022-11-16 16:15:19,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:19,937 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:19,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:20,256 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:20,257 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:20,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779289306] [2022-11-16 16:15:20,257 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779289306] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:15:20,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [981379224] [2022-11-16 16:15:20,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:20,258 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:20,258 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:20,262 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:15:20,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 16:15:20,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:20,349 INFO L263 TraceCheckSpWp]: Trace formula consists of 67 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-16 16:15:20,356 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:15:20,481 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:20,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-11-16 16:15:20,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:15:20,751 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:20,751 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:15:20,932 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:20,932 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [981379224] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:15:20,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1226914714] [2022-11-16 16:15:20,954 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-11-16 16:15:20,954 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:15:20,959 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:15:20,965 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:15:20,966 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:15:21,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:21,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:15:21,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:21,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:21,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:21,464 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:15:21,930 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '602#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:15:21,931 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:15:21,931 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:15:21,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-11-16 16:15:21,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916294786] [2022-11-16 16:15:21,931 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:15:21,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-16 16:15:21,932 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:21,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-16 16:15:21,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-16 16:15:21,933 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:22,374 INFO L93 Difference]: Finished difference Result 96 states and 114 transitions. [2022-11-16 16:15:22,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 16:15:22,375 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-16 16:15:22,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:22,376 INFO L225 Difference]: With dead ends: 96 [2022-11-16 16:15:22,376 INFO L226 Difference]: Without dead ends: 96 [2022-11-16 16:15:22,376 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2022-11-16 16:15:22,377 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 201 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:22,377 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 221 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 16:15:22,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-16 16:15:22,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 33. [2022-11-16 16:15:22,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-16 16:15:22,382 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 5 [2022-11-16 16:15:22,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:22,383 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-16 16:15:22,383 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,383 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-16 16:15:22,384 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-16 16:15:22,384 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:22,384 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-16 16:15:22,400 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 16:15:22,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:22,585 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:22,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:22,586 INFO L85 PathProgramCache]: Analyzing trace with hash 523273240, now seen corresponding path program 1 times [2022-11-16 16:15:22,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:22,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289073435] [2022-11-16 16:15:22,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:22,587 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:22,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:22,675 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:22,675 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:22,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289073435] [2022-11-16 16:15:22,676 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289073435] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:22,676 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:22,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:22,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868960923] [2022-11-16 16:15:22,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:22,678 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 16:15:22,678 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:22,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 16:15:22,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:22,679 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:22,759 INFO L93 Difference]: Finished difference Result 55 states and 64 transitions. [2022-11-16 16:15:22,759 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 16:15:22,759 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-16 16:15:22,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:22,760 INFO L225 Difference]: With dead ends: 55 [2022-11-16 16:15:22,760 INFO L226 Difference]: Without dead ends: 55 [2022-11-16 16:15:22,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-16 16:15:22,761 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 84 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:22,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 30 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:22,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-11-16 16:15:22,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 34. [2022-11-16 16:15:22,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 33 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 41 transitions. [2022-11-16 16:15:22,779 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 41 transitions. Word has length 6 [2022-11-16 16:15:22,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:22,779 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 41 transitions. [2022-11-16 16:15:22,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,780 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 41 transitions. [2022-11-16 16:15:22,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-16 16:15:22,780 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:22,780 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-16 16:15:22,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 16:15:22,781 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:22,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:22,782 INFO L85 PathProgramCache]: Analyzing trace with hash 523273239, now seen corresponding path program 1 times [2022-11-16 16:15:22,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:22,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1614584820] [2022-11-16 16:15:22,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:22,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:22,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:22,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:22,831 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:22,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1614584820] [2022-11-16 16:15:22,831 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1614584820] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:22,832 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:22,832 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:22,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956781585] [2022-11-16 16:15:22,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:22,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 16:15:22,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:22,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 16:15:22,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:22,838 INFO L87 Difference]: Start difference. First operand 34 states and 41 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:22,881 INFO L93 Difference]: Finished difference Result 33 states and 39 transitions. [2022-11-16 16:15:22,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 16:15:22,881 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-16 16:15:22,882 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:22,882 INFO L225 Difference]: With dead ends: 33 [2022-11-16 16:15:22,883 INFO L226 Difference]: Without dead ends: 33 [2022-11-16 16:15:22,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:22,886 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 53 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:22,887 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 18 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:22,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-16 16:15:22,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2022-11-16 16:15:22,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-11-16 16:15:22,894 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 6 [2022-11-16 16:15:22,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:22,894 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-11-16 16:15:22,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:22,895 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-11-16 16:15:22,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-16 16:15:22,895 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:22,896 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-11-16 16:15:22,896 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-16 16:15:22,896 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:22,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:22,897 INFO L85 PathProgramCache]: Analyzing trace with hash 520684782, now seen corresponding path program 1 times [2022-11-16 16:15:22,897 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:22,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [223645035] [2022-11-16 16:15:22,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:22,898 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:22,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:23,193 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:23,193 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:23,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [223645035] [2022-11-16 16:15:23,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [223645035] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:15:23,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1148836498] [2022-11-16 16:15:23,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:23,194 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:23,195 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:23,196 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:15:23,218 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 16:15:23,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:23,277 INFO L263 TraceCheckSpWp]: Trace formula consists of 70 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-16 16:15:23,279 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:15:23,342 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-16 16:15:23,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-16 16:15:23,563 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:23,563 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:15:23,756 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:23,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1148836498] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:15:23,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1916549636] [2022-11-16 16:15:23,761 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-11-16 16:15:23,761 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:15:23,761 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:15:23,762 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:15:23,762 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:15:23,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:23,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:15:23,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:23,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:23,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:24,010 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:15:24,705 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '952#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet18#1|)) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_#t~nondet18#1| 127) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:15:24,705 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:15:24,705 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:15:24,706 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-11-16 16:15:24,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [480851524] [2022-11-16 16:15:24,706 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:15:24,706 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-16 16:15:24,706 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:24,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-16 16:15:24,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=238, Unknown=0, NotChecked=0, Total=306 [2022-11-16 16:15:24,707 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:25,107 INFO L93 Difference]: Finished difference Result 83 states and 96 transitions. [2022-11-16 16:15:25,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 16:15:25,108 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-16 16:15:25,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:25,109 INFO L225 Difference]: With dead ends: 83 [2022-11-16 16:15:25,109 INFO L226 Difference]: Without dead ends: 83 [2022-11-16 16:15:25,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=103, Invalid=317, Unknown=0, NotChecked=0, Total=420 [2022-11-16 16:15:25,110 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 268 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 268 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:25,111 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [268 Valid, 172 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 16:15:25,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-16 16:15:25,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 30. [2022-11-16 16:15:25,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 20 states have (on average 1.75) internal successors, (35), 29 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 35 transitions. [2022-11-16 16:15:25,113 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 35 transitions. Word has length 6 [2022-11-16 16:15:25,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:25,114 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 35 transitions. [2022-11-16 16:15:25,114 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,114 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 35 transitions. [2022-11-16 16:15:25,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-16 16:15:25,115 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:25,115 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:25,126 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-16 16:15:25,315 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-16 16:15:25,316 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:25,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:25,316 INFO L85 PathProgramCache]: Analyzing trace with hash 354410300, now seen corresponding path program 1 times [2022-11-16 16:15:25,316 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:25,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807101751] [2022-11-16 16:15:25,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:25,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:25,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:25,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:25,376 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:25,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807101751] [2022-11-16 16:15:25,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807101751] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:25,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:25,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:25,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1719032226] [2022-11-16 16:15:25,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:25,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 16:15:25,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:25,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 16:15:25,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:25,379 INFO L87 Difference]: Start difference. First operand 30 states and 35 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:25,438 INFO L93 Difference]: Finished difference Result 30 states and 36 transitions. [2022-11-16 16:15:25,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 16:15:25,439 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-16 16:15:25,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:25,439 INFO L225 Difference]: With dead ends: 30 [2022-11-16 16:15:25,439 INFO L226 Difference]: Without dead ends: 30 [2022-11-16 16:15:25,440 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:25,441 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 37 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:25,441 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 21 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:25,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-16 16:15:25,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 27. [2022-11-16 16:15:25,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.6) internal successors, (32), 26 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 32 transitions. [2022-11-16 16:15:25,444 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 32 transitions. Word has length 8 [2022-11-16 16:15:25,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:25,444 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 32 transitions. [2022-11-16 16:15:25,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,445 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2022-11-16 16:15:25,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-11-16 16:15:25,445 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:25,446 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:25,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-16 16:15:25,446 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:25,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:25,447 INFO L85 PathProgramCache]: Analyzing trace with hash 354410301, now seen corresponding path program 1 times [2022-11-16 16:15:25,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:25,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [215495959] [2022-11-16 16:15:25,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:25,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:25,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:25,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:25,649 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:25,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [215495959] [2022-11-16 16:15:25,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [215495959] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:25,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:25,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:25,651 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1463992288] [2022-11-16 16:15:25,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:25,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 16:15:25,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:25,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 16:15:25,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:25,653 INFO L87 Difference]: Start difference. First operand 27 states and 32 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:25,740 INFO L93 Difference]: Finished difference Result 43 states and 51 transitions. [2022-11-16 16:15:25,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 16:15:25,741 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-11-16 16:15:25,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:25,742 INFO L225 Difference]: With dead ends: 43 [2022-11-16 16:15:25,742 INFO L226 Difference]: Without dead ends: 43 [2022-11-16 16:15:25,743 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-16 16:15:25,743 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 91 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:25,744 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 31 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:25,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-16 16:15:25,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 33. [2022-11-16 16:15:25,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 26 states have (on average 1.6153846153846154) internal successors, (42), 32 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 42 transitions. [2022-11-16 16:15:25,747 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 42 transitions. Word has length 8 [2022-11-16 16:15:25,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:25,748 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 42 transitions. [2022-11-16 16:15:25,748 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,748 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 42 transitions. [2022-11-16 16:15:25,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-11-16 16:15:25,755 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:25,755 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:25,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-16 16:15:25,756 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:25,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:25,756 INFO L85 PathProgramCache]: Analyzing trace with hash 1285859555, now seen corresponding path program 1 times [2022-11-16 16:15:25,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:25,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262077560] [2022-11-16 16:15:25,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:25,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:25,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:25,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:25,951 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:25,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1262077560] [2022-11-16 16:15:25,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1262077560] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:25,952 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:25,952 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 16:15:25,952 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329395674] [2022-11-16 16:15:25,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:25,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 16:15:25,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:25,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 16:15:25,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:25,953 INFO L87 Difference]: Start difference. First operand 33 states and 42 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:25,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:25,991 INFO L93 Difference]: Finished difference Result 32 states and 41 transitions. [2022-11-16 16:15:25,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 16:15:25,991 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-11-16 16:15:25,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:25,992 INFO L225 Difference]: With dead ends: 32 [2022-11-16 16:15:25,993 INFO L226 Difference]: Without dead ends: 29 [2022-11-16 16:15:25,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:25,994 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 21 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:25,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 32 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:25,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-16 16:15:25,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-11-16 16:15:26,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 23 states have (on average 1.608695652173913) internal successors, (37), 28 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 37 transitions. [2022-11-16 16:15:26,000 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 37 transitions. Word has length 10 [2022-11-16 16:15:26,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:26,001 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 37 transitions. [2022-11-16 16:15:26,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,001 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 37 transitions. [2022-11-16 16:15:26,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-16 16:15:26,002 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:26,002 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:26,002 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-16 16:15:26,004 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:26,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:26,005 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053803, now seen corresponding path program 1 times [2022-11-16 16:15:26,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:26,005 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1919565799] [2022-11-16 16:15:26,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:26,006 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:26,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:26,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:26,060 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:26,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1919565799] [2022-11-16 16:15:26,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1919565799] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:26,061 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:26,061 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:26,063 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268903288] [2022-11-16 16:15:26,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:26,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 16:15:26,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:26,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 16:15:26,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 16:15:26,065 INFO L87 Difference]: Start difference. First operand 29 states and 37 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:26,110 INFO L93 Difference]: Finished difference Result 29 states and 36 transitions. [2022-11-16 16:15:26,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 16:15:26,111 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-16 16:15:26,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:26,111 INFO L225 Difference]: With dead ends: 29 [2022-11-16 16:15:26,111 INFO L226 Difference]: Without dead ends: 29 [2022-11-16 16:15:26,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:26,112 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 25 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:26,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 14 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:26,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-11-16 16:15:26,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-11-16 16:15:26,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.5217391304347827) internal successors, (35), 27 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-11-16 16:15:26,118 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-11-16 16:15:26,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:26,119 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-11-16 16:15:26,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,119 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-11-16 16:15:26,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-16 16:15:26,120 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:26,121 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:26,121 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-16 16:15:26,121 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:26,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:26,122 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053804, now seen corresponding path program 1 times [2022-11-16 16:15:26,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:26,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1179476549] [2022-11-16 16:15:26,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:26,123 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:26,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:26,270 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:26,271 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:26,271 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1179476549] [2022-11-16 16:15:26,271 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1179476549] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:26,271 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:26,271 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 16:15:26,272 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13794629] [2022-11-16 16:15:26,272 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:26,272 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 16:15:26,272 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:26,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 16:15:26,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-16 16:15:26,273 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:26,396 INFO L93 Difference]: Finished difference Result 50 states and 61 transitions. [2022-11-16 16:15:26,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 16:15:26,396 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-16 16:15:26,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:26,397 INFO L225 Difference]: With dead ends: 50 [2022-11-16 16:15:26,397 INFO L226 Difference]: Without dead ends: 50 [2022-11-16 16:15:26,398 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-11-16 16:15:26,398 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 79 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:26,399 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 17 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:26,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-16 16:15:26,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-16 16:15:26,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.4642857142857142) internal successors, (41), 32 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 41 transitions. [2022-11-16 16:15:26,401 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 41 transitions. Word has length 11 [2022-11-16 16:15:26,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:26,401 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 41 transitions. [2022-11-16 16:15:26,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,402 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 41 transitions. [2022-11-16 16:15:26,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-16 16:15:26,402 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:26,403 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:26,403 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-11-16 16:15:26,403 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:26,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:26,404 INFO L85 PathProgramCache]: Analyzing trace with hash 1209062877, now seen corresponding path program 1 times [2022-11-16 16:15:26,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:26,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1618797297] [2022-11-16 16:15:26,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:26,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:26,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:26,428 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:26,428 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:26,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1618797297] [2022-11-16 16:15:26,429 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1618797297] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:26,429 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:26,429 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 16:15:26,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [133965469] [2022-11-16 16:15:26,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:26,430 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 16:15:26,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:26,430 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 16:15:26,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 16:15:26,431 INFO L87 Difference]: Start difference. First operand 33 states and 41 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:26,450 INFO L93 Difference]: Finished difference Result 35 states and 43 transitions. [2022-11-16 16:15:26,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 16:15:26,450 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-16 16:15:26,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:26,451 INFO L225 Difference]: With dead ends: 35 [2022-11-16 16:15:26,451 INFO L226 Difference]: Without dead ends: 35 [2022-11-16 16:15:26,451 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 16:15:26,452 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 0 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:26,452 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 29 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:26,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-11-16 16:15:26,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-11-16 16:15:26,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 30 states have (on average 1.4333333333333333) internal successors, (43), 34 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 43 transitions. [2022-11-16 16:15:26,455 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 43 transitions. Word has length 11 [2022-11-16 16:15:26,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:26,456 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 43 transitions. [2022-11-16 16:15:26,456 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:26,456 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 43 transitions. [2022-11-16 16:15:26,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-16 16:15:26,458 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:26,458 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:26,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-11-16 16:15:26,458 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:26,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:26,459 INFO L85 PathProgramCache]: Analyzing trace with hash -2035392994, now seen corresponding path program 1 times [2022-11-16 16:15:26,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:26,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1385375282] [2022-11-16 16:15:26,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:26,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:26,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:26,842 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:26,842 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:26,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1385375282] [2022-11-16 16:15:26,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1385375282] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:26,843 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:26,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-16 16:15:26,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995898079] [2022-11-16 16:15:26,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:26,845 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-16 16:15:26,845 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:26,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-16 16:15:26,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-16 16:15:26,846 INFO L87 Difference]: Start difference. First operand 35 states and 43 transitions. Second operand has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:27,321 INFO L93 Difference]: Finished difference Result 81 states and 97 transitions. [2022-11-16 16:15:27,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-16 16:15:27,322 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-16 16:15:27,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:27,322 INFO L225 Difference]: With dead ends: 81 [2022-11-16 16:15:27,322 INFO L226 Difference]: Without dead ends: 81 [2022-11-16 16:15:27,323 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=149, Invalid=313, Unknown=0, NotChecked=0, Total=462 [2022-11-16 16:15:27,323 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 129 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:27,324 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 84 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 16:15:27,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-16 16:15:27,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 46. [2022-11-16 16:15:27,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3902439024390243) internal successors, (57), 45 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 57 transitions. [2022-11-16 16:15:27,328 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 57 transitions. Word has length 13 [2022-11-16 16:15:27,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:27,328 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 57 transitions. [2022-11-16 16:15:27,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,329 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 57 transitions. [2022-11-16 16:15:27,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-16 16:15:27,330 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:27,330 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:27,330 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-11-16 16:15:27,330 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:27,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:27,331 INFO L85 PathProgramCache]: Analyzing trace with hash -2026746548, now seen corresponding path program 1 times [2022-11-16 16:15:27,331 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:27,331 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718505480] [2022-11-16 16:15:27,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:27,332 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:27,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:27,406 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:27,407 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:27,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718505480] [2022-11-16 16:15:27,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [718505480] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:27,407 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:27,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 16:15:27,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [55920296] [2022-11-16 16:15:27,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:27,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 16:15:27,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:27,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 16:15:27,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-16 16:15:27,410 INFO L87 Difference]: Start difference. First operand 46 states and 57 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:27,465 INFO L93 Difference]: Finished difference Result 51 states and 61 transitions. [2022-11-16 16:15:27,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 16:15:27,466 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-16 16:15:27,466 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:27,466 INFO L225 Difference]: With dead ends: 51 [2022-11-16 16:15:27,466 INFO L226 Difference]: Without dead ends: 48 [2022-11-16 16:15:27,467 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-11-16 16:15:27,468 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 10 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:27,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 26 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 16:15:27,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-11-16 16:15:27,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 47. [2022-11-16 16:15:27,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 46 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 55 transitions. [2022-11-16 16:15:27,471 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 55 transitions. Word has length 13 [2022-11-16 16:15:27,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:27,471 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 55 transitions. [2022-11-16 16:15:27,471 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,472 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 55 transitions. [2022-11-16 16:15:27,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-16 16:15:27,472 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:27,472 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:27,473 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-11-16 16:15:27,473 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:27,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:27,474 INFO L85 PathProgramCache]: Analyzing trace with hash -1802581683, now seen corresponding path program 1 times [2022-11-16 16:15:27,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:27,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968636879] [2022-11-16 16:15:27,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:27,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:27,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:27,768 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:15:27,768 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:27,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968636879] [2022-11-16 16:15:27,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1968636879] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:27,768 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:27,769 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 16:15:27,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [325781475] [2022-11-16 16:15:27,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:27,769 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 16:15:27,769 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:27,769 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 16:15:27,770 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-16 16:15:27,770 INFO L87 Difference]: Start difference. First operand 47 states and 55 transitions. Second operand has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:27,912 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2022-11-16 16:15:27,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 16:15:27,913 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-16 16:15:27,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:27,914 INFO L225 Difference]: With dead ends: 43 [2022-11-16 16:15:27,914 INFO L226 Difference]: Without dead ends: 37 [2022-11-16 16:15:27,914 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-16 16:15:27,915 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 10 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:27,915 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 78 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:27,915 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-11-16 16:15:27,916 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-11-16 16:15:27,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-11-16 16:15:27,917 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 15 [2022-11-16 16:15:27,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:27,917 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-11-16 16:15:27,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:27,917 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-11-16 16:15:27,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-11-16 16:15:27,918 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:27,918 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:27,918 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-11-16 16:15:27,918 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:27,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:27,920 INFO L85 PathProgramCache]: Analyzing trace with hash 204836708, now seen corresponding path program 1 times [2022-11-16 16:15:27,920 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:27,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1592013214] [2022-11-16 16:15:27,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:27,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:27,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:28,207 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:28,208 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:28,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1592013214] [2022-11-16 16:15:28,208 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1592013214] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:15:28,208 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 16:15:28,209 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 16:15:28,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1152187172] [2022-11-16 16:15:28,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:15:28,209 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 16:15:28,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:28,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 16:15:28,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-11-16 16:15:28,214 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:28,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:28,372 INFO L93 Difference]: Finished difference Result 44 states and 50 transitions. [2022-11-16 16:15:28,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 16:15:28,372 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-11-16 16:15:28,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:28,373 INFO L225 Difference]: With dead ends: 44 [2022-11-16 16:15:28,373 INFO L226 Difference]: Without dead ends: 38 [2022-11-16 16:15:28,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-16 16:15:28,374 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 40 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:28,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 74 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:28,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-16 16:15:28,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2022-11-16 16:15:28,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 32 states have (on average 1.34375) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:28,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-11-16 16:15:28,376 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 15 [2022-11-16 16:15:28,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:28,377 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-11-16 16:15:28,377 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:28,377 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-11-16 16:15:28,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-16 16:15:28,377 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:28,378 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:28,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-11-16 16:15:28,378 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:28,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:28,381 INFO L85 PathProgramCache]: Analyzing trace with hash 1117547254, now seen corresponding path program 1 times [2022-11-16 16:15:28,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:28,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1695679844] [2022-11-16 16:15:28,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:28,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:28,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:28,781 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:28,781 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:28,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1695679844] [2022-11-16 16:15:28,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1695679844] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:15:28,782 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1392550696] [2022-11-16 16:15:28,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:28,782 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:28,782 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:28,785 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:15:28,795 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 16:15:28,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:28,901 INFO L263 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-16 16:15:28,903 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:15:29,030 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:29,030 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:15:29,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:15:29,196 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:29,196 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1392550696] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:15:29,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1897144500] [2022-11-16 16:15:29,204 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:15:29,205 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:15:29,205 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:15:29,205 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:15:29,206 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:15:29,267 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:29,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:15:29,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:29,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:29,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:29,519 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:29,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:29,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:29,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:29,742 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:15:29,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:15:30,211 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:15:33,847 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2087#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:15:33,848 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:15:33,848 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:15:33,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 17 [2022-11-16 16:15:33,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694564280] [2022-11-16 16:15:33,853 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:15:33,854 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-16 16:15:33,854 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:33,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-16 16:15:33,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=852, Unknown=0, NotChecked=0, Total=992 [2022-11-16 16:15:33,855 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:34,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:34,173 INFO L93 Difference]: Finished difference Result 54 states and 59 transitions. [2022-11-16 16:15:34,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 16:15:34,175 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-11-16 16:15:34,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:34,176 INFO L225 Difference]: With dead ends: 54 [2022-11-16 16:15:34,176 INFO L226 Difference]: Without dead ends: 50 [2022-11-16 16:15:34,177 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 24 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 433 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=201, Invalid=1131, Unknown=0, NotChecked=0, Total=1332 [2022-11-16 16:15:34,178 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 239 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:34,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 35 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 16:15:34,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-11-16 16:15:34,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-11-16 16:15:34,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:34,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-11-16 16:15:34,181 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 17 [2022-11-16 16:15:34,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:34,181 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-11-16 16:15:34,182 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:34,182 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-11-16 16:15:34,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-16 16:15:34,183 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:34,183 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:34,191 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 16:15:34,389 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:34,389 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:34,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:34,390 INFO L85 PathProgramCache]: Analyzing trace with hash 221052965, now seen corresponding path program 1 times [2022-11-16 16:15:34,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:34,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813328998] [2022-11-16 16:15:34,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:34,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:34,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:34,691 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:34,692 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:34,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813328998] [2022-11-16 16:15:34,692 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813328998] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:15:34,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [661828826] [2022-11-16 16:15:34,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:34,693 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:34,693 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:34,695 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:15:34,721 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-16 16:15:34,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:34,819 INFO L263 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-16 16:15:34,821 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:15:34,941 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:34,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:15:35,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:15:35,102 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:35,103 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [661828826] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:15:35,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [150653250] [2022-11-16 16:15:35,106 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:15:35,106 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:15:35,107 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:15:35,107 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:15:35,107 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:15:35,145 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:35,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:15:35,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:35,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:35,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:35,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:35,452 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:15:35,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-16 16:15:35,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:35,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:35,703 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-16 16:15:35,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-16 16:15:35,936 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-16 16:15:35,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-16 16:15:38,328 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:15:42,415 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2323#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:15:42,415 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:15:42,415 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:15:42,416 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 15 [2022-11-16 16:15:42,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304710807] [2022-11-16 16:15:42,416 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:15:42,416 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-16 16:15:42,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:42,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-16 16:15:42,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=146, Invalid=910, Unknown=0, NotChecked=0, Total=1056 [2022-11-16 16:15:42,418 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:42,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:42,621 INFO L93 Difference]: Finished difference Result 62 states and 72 transitions. [2022-11-16 16:15:42,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 16:15:42,624 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-16 16:15:42,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:42,625 INFO L225 Difference]: With dead ends: 62 [2022-11-16 16:15:42,625 INFO L226 Difference]: Without dead ends: 62 [2022-11-16 16:15:42,626 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 28 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 416 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=202, Invalid=1204, Unknown=0, NotChecked=0, Total=1406 [2022-11-16 16:15:42,626 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 296 mSDsluCounter, 31 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:42,627 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [296 Valid, 38 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 16:15:42,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-16 16:15:42,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 43. [2022-11-16 16:15:42,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 40 states have (on average 1.3) internal successors, (52), 42 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:42,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 52 transitions. [2022-11-16 16:15:42,629 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 52 transitions. Word has length 19 [2022-11-16 16:15:42,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:42,629 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 52 transitions. [2022-11-16 16:15:42,630 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:42,630 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 52 transitions. [2022-11-16 16:15:42,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-16 16:15:42,630 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:42,630 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:42,639 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-11-16 16:15:42,836 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-11-16 16:15:42,836 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:42,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:42,836 INFO L85 PathProgramCache]: Analyzing trace with hash -1734844397, now seen corresponding path program 1 times [2022-11-16 16:15:42,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:42,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1238254050] [2022-11-16 16:15:42,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:42,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:42,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:43,077 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:43,077 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:43,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1238254050] [2022-11-16 16:15:43,078 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1238254050] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:15:43,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [245009413] [2022-11-16 16:15:43,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:43,078 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:43,078 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:43,080 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:15:43,087 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-16 16:15:43,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:43,178 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 23 conjunts are in the unsatisfiable core [2022-11-16 16:15:43,180 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:15:43,289 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:43,289 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:15:43,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:15:43,462 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:43,462 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [245009413] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:15:43,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1389625220] [2022-11-16 16:15:43,464 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:15:43,464 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:15:43,464 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:15:43,465 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:15:43,465 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:15:43,495 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:43,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:15:43,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:43,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:43,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:43,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:43,732 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:15:43,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-11-16 16:15:43,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:43,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:43,916 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-11-16 16:15:43,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-11-16 16:15:44,104 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-11-16 16:15:44,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-11-16 16:15:45,366 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:15:48,841 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2588#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:15:48,841 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:15:48,841 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:15:48,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 18 [2022-11-16 16:15:48,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [63971368] [2022-11-16 16:15:48,842 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:15:48,842 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-16 16:15:48,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:48,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-16 16:15:48,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=139, Invalid=983, Unknown=0, NotChecked=0, Total=1122 [2022-11-16 16:15:48,843 INFO L87 Difference]: Start difference. First operand 43 states and 52 transitions. Second operand has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:49,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:15:49,214 INFO L93 Difference]: Finished difference Result 58 states and 66 transitions. [2022-11-16 16:15:49,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-16 16:15:49,215 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-16 16:15:49,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:15:49,215 INFO L225 Difference]: With dead ends: 58 [2022-11-16 16:15:49,215 INFO L226 Difference]: Without dead ends: 58 [2022-11-16 16:15:49,216 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 499 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=266, Invalid=1540, Unknown=0, NotChecked=0, Total=1806 [2022-11-16 16:15:49,217 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 221 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 221 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:15:49,217 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [221 Valid, 46 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 16:15:49,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-11-16 16:15:49,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 46. [2022-11-16 16:15:49,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.2790697674418605) internal successors, (55), 45 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:49,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 55 transitions. [2022-11-16 16:15:49,219 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 55 transitions. Word has length 20 [2022-11-16 16:15:49,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:15:49,220 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 55 transitions. [2022-11-16 16:15:49,220 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:15:49,220 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 55 transitions. [2022-11-16 16:15:49,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-11-16 16:15:49,221 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:15:49,221 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:15:49,227 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-11-16 16:15:49,426 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-11-16 16:15:49,426 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:15:49,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:15:49,427 INFO L85 PathProgramCache]: Analyzing trace with hash -738116091, now seen corresponding path program 2 times [2022-11-16 16:15:49,427 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:15:49,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469134802] [2022-11-16 16:15:49,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:15:49,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:15:49,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:15:49,800 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:49,800 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:15:49,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469134802] [2022-11-16 16:15:49,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469134802] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:15:49,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1000695822] [2022-11-16 16:15:49,801 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:15:49,801 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:15:49,801 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:15:49,803 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:15:49,827 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-16 16:15:50,003 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-16 16:15:50,003 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:15:50,006 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-16 16:15:50,008 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:15:50,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:15:50,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:50,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:15:50,594 INFO L321 Elim1Store]: treesize reduction 24, result has 35.1 percent of original size [2022-11-16 16:15:50,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2022-11-16 16:15:50,621 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:50,621 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:15:50,931 WARN L833 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (v_ArrVal_286 (Array Int Int))) (let ((.cse1 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_286))) (let ((.cse0 (select (select .cse1 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (= .cse0 0) (not (= (select (select .cse1 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) .cse0)))))) is different from false [2022-11-16 16:15:50,963 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:15:50,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-11-16 16:15:50,999 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:15:50,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 116 [2022-11-16 16:15:51,025 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:15:51,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-11-16 16:15:51,414 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:15:51,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1000695822] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:15:51,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1549121678] [2022-11-16 16:15:51,417 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:15:51,417 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:15:51,418 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:15:51,418 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:15:51,418 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:15:51,447 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:15:51,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:15:51,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:51,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:51,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:51,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:15:51,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:51,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:51,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:15:51,751 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:15:51,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:15:52,033 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:15:55,247 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2882#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:15:55,247 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:15:55,247 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:15:55,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 31 [2022-11-16 16:15:55,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829150584] [2022-11-16 16:15:55,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:15:55,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-16 16:15:55,248 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:15:55,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-16 16:15:55,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=1805, Unknown=1, NotChecked=86, Total=2070 [2022-11-16 16:15:55,250 INFO L87 Difference]: Start difference. First operand 46 states and 55 transitions. Second operand has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:04,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:04,423 INFO L93 Difference]: Finished difference Result 97 states and 111 transitions. [2022-11-16 16:16:04,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-16 16:16:04,426 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-11-16 16:16:04,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:04,428 INFO L225 Difference]: With dead ends: 97 [2022-11-16 16:16:04,428 INFO L226 Difference]: Without dead ends: 93 [2022-11-16 16:16:04,429 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 29 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 1 IntricatePredicates, 3 DeprecatedPredicates, 1098 ImplicationChecksByTransitivity, 12.9s TimeCoverageRelationStatistics Valid=321, Invalid=3221, Unknown=2, NotChecked=116, Total=3660 [2022-11-16 16:16:04,429 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 53 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 97 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:04,430 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 104 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 159 Invalid, 0 Unknown, 97 Unchecked, 0.2s Time] [2022-11-16 16:16:04,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-16 16:16:04,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 73. [2022-11-16 16:16:04,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 70 states have (on average 1.2428571428571429) internal successors, (87), 72 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:04,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 87 transitions. [2022-11-16 16:16:04,444 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 87 transitions. Word has length 22 [2022-11-16 16:16:04,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:04,445 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 87 transitions. [2022-11-16 16:16:04,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:04,445 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 87 transitions. [2022-11-16 16:16:04,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-16 16:16:04,446 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:04,446 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:04,455 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-11-16 16:16:04,652 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:04,652 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:04,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:04,653 INFO L85 PathProgramCache]: Analyzing trace with hash 1722857087, now seen corresponding path program 1 times [2022-11-16 16:16:04,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:04,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680869671] [2022-11-16 16:16:04,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:04,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:04,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:04,955 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:04,956 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:04,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680869671] [2022-11-16 16:16:04,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680869671] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:04,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [451768419] [2022-11-16 16:16:04,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:04,956 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:04,957 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:04,958 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:04,969 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-16 16:16:05,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:05,093 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-16 16:16:05,095 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:05,179 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-16 16:16:05,179 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:05,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2022-11-16 16:16:05,301 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-16 16:16:05,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [451768419] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:05,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1697695604] [2022-11-16 16:16:05,303 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:16:05,304 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:05,304 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:05,304 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:05,304 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:05,344 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:05,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:05,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:05,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:05,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:05,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:05,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:16:05,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:05,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:05,823 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:05,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:06,295 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:10,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1697695604] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 16:16:10,835 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:10,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [7, 5, 5] total 28 [2022-11-16 16:16:10,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1799467757] [2022-11-16 16:16:10,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 16:16:10,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-16 16:16:10,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:10,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-16 16:16:10,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=664, Unknown=0, NotChecked=0, Total=812 [2022-11-16 16:16:10,837 INFO L87 Difference]: Start difference. First operand 73 states and 87 transitions. Second operand has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:15,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:15,379 INFO L93 Difference]: Finished difference Result 82 states and 95 transitions. [2022-11-16 16:16:15,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-16 16:16:15,380 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-16 16:16:15,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:15,381 INFO L225 Difference]: With dead ends: 82 [2022-11-16 16:16:15,381 INFO L226 Difference]: Without dead ends: 82 [2022-11-16 16:16:15,382 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 226 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=280, Invalid=1126, Unknown=0, NotChecked=0, Total=1406 [2022-11-16 16:16:15,382 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 72 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 177 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 2 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 177 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:15,383 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 2 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 177 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 16:16:15,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-16 16:16:15,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 73. [2022-11-16 16:16:15,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 70 states have (on average 1.2285714285714286) internal successors, (86), 72 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:15,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 86 transitions. [2022-11-16 16:16:15,386 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 86 transitions. Word has length 24 [2022-11-16 16:16:15,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:15,386 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 86 transitions. [2022-11-16 16:16:15,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:15,387 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 86 transitions. [2022-11-16 16:16:15,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-16 16:16:15,388 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:15,388 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:15,395 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-16 16:16:15,591 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-11-16 16:16:15,591 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:15,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:15,592 INFO L85 PathProgramCache]: Analyzing trace with hash 1241317677, now seen corresponding path program 3 times [2022-11-16 16:16:15,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:15,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [812782224] [2022-11-16 16:16:15,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:15,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:15,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:15,963 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:15,964 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:15,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [812782224] [2022-11-16 16:16:15,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [812782224] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:15,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1011002915] [2022-11-16 16:16:15,964 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:16:15,965 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:15,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:15,966 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:15,991 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-16 16:16:16,135 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:16:16,136 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:16:16,138 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-16 16:16:16,140 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:16,160 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-16 16:16:16,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-16 16:16:16,359 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:16,359 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:16,729 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:16,729 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1011002915] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:16,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1058420917] [2022-11-16 16:16:16,730 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:16:16,730 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:16,731 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:16,731 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:16,731 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:16,766 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:16,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:16,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:16,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:16,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:16,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:17,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:16:17,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:17,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:17,235 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:17,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:17,516 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:21,178 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3613#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:16:21,178 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:16:21,178 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:21,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-16 16:16:21,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [972158825] [2022-11-16 16:16:21,178 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:16:21,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-16 16:16:21,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:21,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-16 16:16:21,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1216, Unknown=0, NotChecked=0, Total=1406 [2022-11-16 16:16:21,180 INFO L87 Difference]: Start difference. First operand 73 states and 86 transitions. Second operand has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:21,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:21,773 INFO L93 Difference]: Finished difference Result 140 states and 160 transitions. [2022-11-16 16:16:21,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 16:16:21,773 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-11-16 16:16:21,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:21,774 INFO L225 Difference]: With dead ends: 140 [2022-11-16 16:16:21,774 INFO L226 Difference]: Without dead ends: 140 [2022-11-16 16:16:21,775 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 540 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=309, Invalid=1671, Unknown=0, NotChecked=0, Total=1980 [2022-11-16 16:16:21,775 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 251 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 375 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 384 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 375 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:21,776 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 96 Invalid, 384 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 375 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 16:16:21,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140 states. [2022-11-16 16:16:21,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140 to 103. [2022-11-16 16:16:21,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 100 states have (on average 1.24) internal successors, (124), 102 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:21,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 124 transitions. [2022-11-16 16:16:21,780 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 124 transitions. Word has length 26 [2022-11-16 16:16:21,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:21,780 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 124 transitions. [2022-11-16 16:16:21,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:21,781 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 124 transitions. [2022-11-16 16:16:21,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-16 16:16:21,781 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:21,781 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:21,787 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-11-16 16:16:21,986 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-11-16 16:16:21,987 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:21,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:21,987 INFO L85 PathProgramCache]: Analyzing trace with hash -1667724320, now seen corresponding path program 2 times [2022-11-16 16:16:21,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:21,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253512351] [2022-11-16 16:16:21,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:21,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:22,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:22,525 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:22,525 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:22,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253512351] [2022-11-16 16:16:22,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253512351] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:22,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1123980073] [2022-11-16 16:16:22,526 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:16:22,526 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:22,526 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:22,527 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:22,555 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-16 16:16:22,653 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-16 16:16:22,653 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:16:22,655 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 32 conjunts are in the unsatisfiable core [2022-11-16 16:16:22,657 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:22,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:22,810 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:22,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:22,996 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-16 16:16:22,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-11-16 16:16:23,017 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:23,017 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:23,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-16 16:16:23,303 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:23,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1123980073] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:23,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [888475555] [2022-11-16 16:16:23,305 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:16:23,306 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:23,306 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:23,306 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:23,306 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:23,342 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:23,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:23,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:23,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:23,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:23,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:23,626 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:16:23,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:16:23,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:23,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:23,760 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:23,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:24,498 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:29,082 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4069#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:16:29,082 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:16:29,082 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:29,083 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 22 [2022-11-16 16:16:29,083 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077942572] [2022-11-16 16:16:29,083 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:16:29,083 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-16 16:16:29,083 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:29,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-16 16:16:29,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1325, Unknown=0, NotChecked=0, Total=1482 [2022-11-16 16:16:29,085 INFO L87 Difference]: Start difference. First operand 103 states and 124 transitions. Second operand has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:29,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:29,506 INFO L93 Difference]: Finished difference Result 121 states and 140 transitions. [2022-11-16 16:16:29,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-16 16:16:29,507 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-16 16:16:29,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:29,508 INFO L225 Difference]: With dead ends: 121 [2022-11-16 16:16:29,508 INFO L226 Difference]: Without dead ends: 85 [2022-11-16 16:16:29,509 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 664 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=227, Invalid=1753, Unknown=0, NotChecked=0, Total=1980 [2022-11-16 16:16:29,510 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 42 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 47 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:29,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 109 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 163 Invalid, 0 Unknown, 47 Unchecked, 0.2s Time] [2022-11-16 16:16:29,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-16 16:16:29,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 84. [2022-11-16 16:16:29,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 81 states have (on average 1.2469135802469136) internal successors, (101), 83 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:29,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 101 transitions. [2022-11-16 16:16:29,514 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 101 transitions. Word has length 28 [2022-11-16 16:16:29,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:29,514 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 101 transitions. [2022-11-16 16:16:29,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:29,515 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 101 transitions. [2022-11-16 16:16:29,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-16 16:16:29,515 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:29,516 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:29,527 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-16 16:16:29,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-11-16 16:16:29,723 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:29,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:29,723 INFO L85 PathProgramCache]: Analyzing trace with hash 427887228, now seen corresponding path program 2 times [2022-11-16 16:16:29,723 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:29,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [79335308] [2022-11-16 16:16:29,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:29,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:29,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:30,086 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:30,086 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:30,086 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [79335308] [2022-11-16 16:16:30,086 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [79335308] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:30,087 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1044374590] [2022-11-16 16:16:30,087 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:16:30,087 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:30,087 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:30,091 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:30,101 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-16 16:16:30,341 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-16 16:16:30,341 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:16:30,343 INFO L263 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-16 16:16:30,345 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:30,608 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:30,608 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:30,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-16 16:16:31,008 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:31,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1044374590] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:31,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [370123279] [2022-11-16 16:16:31,011 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:16:31,011 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:31,012 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:31,012 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:31,012 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:31,044 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:31,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:31,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:31,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:31,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:31,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:31,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:16:31,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:31,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:31,481 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:31,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:31,713 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:35,377 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4495#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:16:35,378 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:16:35,378 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:35,378 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-11-16 16:16:35,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266960835] [2022-11-16 16:16:35,378 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:16:35,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-16 16:16:35,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:35,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-16 16:16:35,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1313, Unknown=0, NotChecked=0, Total=1482 [2022-11-16 16:16:35,380 INFO L87 Difference]: Start difference. First operand 84 states and 101 transitions. Second operand has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:35,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:35,971 INFO L93 Difference]: Finished difference Result 103 states and 119 transitions. [2022-11-16 16:16:35,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-16 16:16:35,972 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-11-16 16:16:35,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:35,972 INFO L225 Difference]: With dead ends: 103 [2022-11-16 16:16:35,972 INFO L226 Difference]: Without dead ends: 103 [2022-11-16 16:16:35,974 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 53 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=365, Invalid=2085, Unknown=0, NotChecked=0, Total=2450 [2022-11-16 16:16:35,974 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 290 mSDsluCounter, 57 mSDsCounter, 0 mSdLazyCounter, 403 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 410 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 403 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:35,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 67 Invalid, 410 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 403 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 16:16:35,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-11-16 16:16:35,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 87. [2022-11-16 16:16:35,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 84 states have (on average 1.2380952380952381) internal successors, (104), 86 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:35,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 104 transitions. [2022-11-16 16:16:35,979 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 104 transitions. Word has length 29 [2022-11-16 16:16:35,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:35,979 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 104 transitions. [2022-11-16 16:16:35,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:35,980 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 104 transitions. [2022-11-16 16:16:35,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-16 16:16:35,980 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:35,981 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:35,991 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-16 16:16:36,186 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-11-16 16:16:36,187 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:36,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:36,187 INFO L85 PathProgramCache]: Analyzing trace with hash 294381018, now seen corresponding path program 3 times [2022-11-16 16:16:36,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:36,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248210406] [2022-11-16 16:16:36,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:36,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:36,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:36,546 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:36,546 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:36,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [248210406] [2022-11-16 16:16:36,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [248210406] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:36,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [586086467] [2022-11-16 16:16:36,546 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:16:36,547 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:36,547 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:36,555 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:36,583 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-16 16:16:36,693 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:16:36,693 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:16:36,695 INFO L263 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-16 16:16:36,697 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:36,945 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:36,946 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:37,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:16:37,298 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:37,299 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [586086467] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:37,299 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [61968781] [2022-11-16 16:16:37,301 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:16:37,301 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:37,301 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:37,301 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:37,301 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:37,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:37,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:37,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:37,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:37,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:37,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:37,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:16:37,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:37,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:37,729 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:37,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:38,026 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:42,843 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4915#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:16:42,843 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:16:42,843 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:42,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 18 [2022-11-16 16:16:42,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [370713148] [2022-11-16 16:16:42,843 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:16:42,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-16 16:16:42,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:42,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-16 16:16:42,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1094, Unknown=0, NotChecked=0, Total=1260 [2022-11-16 16:16:42,845 INFO L87 Difference]: Start difference. First operand 87 states and 104 transitions. Second operand has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:43,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:43,264 INFO L93 Difference]: Finished difference Result 161 states and 192 transitions. [2022-11-16 16:16:43,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 16:16:43,264 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-16 16:16:43,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:43,265 INFO L225 Difference]: With dead ends: 161 [2022-11-16 16:16:43,265 INFO L226 Difference]: Without dead ends: 161 [2022-11-16 16:16:43,267 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 58 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=248, Invalid=1474, Unknown=0, NotChecked=0, Total=1722 [2022-11-16 16:16:43,268 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 493 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 228 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 493 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 235 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:43,268 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [493 Valid, 55 Invalid, 235 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 16:16:43,269 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2022-11-16 16:16:43,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 122. [2022-11-16 16:16:43,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 119 states have (on average 1.2521008403361344) internal successors, (149), 121 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:43,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 149 transitions. [2022-11-16 16:16:43,281 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 149 transitions. Word has length 30 [2022-11-16 16:16:43,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:43,281 INFO L495 AbstractCegarLoop]: Abstraction has 122 states and 149 transitions. [2022-11-16 16:16:43,282 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:43,282 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 149 transitions. [2022-11-16 16:16:43,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-16 16:16:43,282 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:43,283 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:43,288 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-11-16 16:16:43,487 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-11-16 16:16:43,487 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:43,487 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:43,487 INFO L85 PathProgramCache]: Analyzing trace with hash 538325246, now seen corresponding path program 1 times [2022-11-16 16:16:43,488 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:43,488 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1848954548] [2022-11-16 16:16:43,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:43,488 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:43,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:43,818 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:43,818 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:43,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1848954548] [2022-11-16 16:16:43,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1848954548] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:43,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1240208947] [2022-11-16 16:16:43,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:43,819 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:43,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:43,821 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:43,843 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-16 16:16:43,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:43,961 INFO L263 TraceCheckSpWp]: Trace formula consists of 237 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-16 16:16:43,963 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:44,250 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:44,251 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:44,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:16:44,671 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:16:44,671 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1240208947] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:44,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [144060226] [2022-11-16 16:16:44,673 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:16:44,674 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:44,674 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:44,674 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:44,674 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:44,718 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:44,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:44,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:44,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:44,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:44,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:45,010 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:16:45,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:16:45,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:45,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:45,143 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:45,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:46,747 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:49,831 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5428#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:16:49,831 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:16:49,831 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:49,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 20 [2022-11-16 16:16:49,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1791120708] [2022-11-16 16:16:49,831 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:16:49,832 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-16 16:16:49,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:49,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-16 16:16:49,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1238, Unknown=0, NotChecked=0, Total=1406 [2022-11-16 16:16:49,833 INFO L87 Difference]: Start difference. First operand 122 states and 149 transitions. Second operand has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:50,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:50,514 INFO L93 Difference]: Finished difference Result 150 states and 173 transitions. [2022-11-16 16:16:50,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-16 16:16:50,515 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-16 16:16:50,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:50,516 INFO L225 Difference]: With dead ends: 150 [2022-11-16 16:16:50,516 INFO L226 Difference]: Without dead ends: 150 [2022-11-16 16:16:50,518 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 60 SyntacticMatches, 3 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 637 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=384, Invalid=2166, Unknown=0, NotChecked=0, Total=2550 [2022-11-16 16:16:50,519 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 546 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 546 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:50,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [546 Valid, 48 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 16:16:50,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-11-16 16:16:50,523 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 125. [2022-11-16 16:16:50,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 122 states have (on average 1.2377049180327868) internal successors, (151), 124 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:50,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 151 transitions. [2022-11-16 16:16:50,524 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 151 transitions. Word has length 31 [2022-11-16 16:16:50,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:50,525 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 151 transitions. [2022-11-16 16:16:50,525 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:50,525 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 151 transitions. [2022-11-16 16:16:50,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-16 16:16:50,526 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:50,526 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:50,547 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-16 16:16:50,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:50,733 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:50,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:50,734 INFO L85 PathProgramCache]: Analyzing trace with hash -1117195730, now seen corresponding path program 4 times [2022-11-16 16:16:50,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:50,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697291904] [2022-11-16 16:16:50,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:50,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:50,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:52,056 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:16:52,056 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:16:52,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697291904] [2022-11-16 16:16:52,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697291904] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:16:52,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [460473244] [2022-11-16 16:16:52,057 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:16:52,057 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:52,057 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:16:52,058 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:16:52,060 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-16 16:16:52,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:16:52,204 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-16 16:16:52,207 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:16:52,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:52,675 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:52,676 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:16:52,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:16:52,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:16:53,011 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:16:53,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [460473244] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:16:53,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [512984328] [2022-11-16 16:16:53,013 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:16:53,013 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:16:53,013 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:16:53,013 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:16:53,014 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:16:53,050 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:16:53,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:16:53,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:53,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:53,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:53,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:16:53,337 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:16:53,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:16:53,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:53,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:16:53,465 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:16:53,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:16:53,907 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:16:57,170 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5953#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:16:57,171 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:16:57,171 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:16:57,171 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 12, 12] total 28 [2022-11-16 16:16:57,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555703284] [2022-11-16 16:16:57,172 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:16:57,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-16 16:16:57,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:16:57,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-16 16:16:57,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=1569, Unknown=0, NotChecked=0, Total=1722 [2022-11-16 16:16:57,175 INFO L87 Difference]: Start difference. First operand 125 states and 151 transitions. Second operand has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:59,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:16:59,554 INFO L93 Difference]: Finished difference Result 389 states and 443 transitions. [2022-11-16 16:16:59,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-16 16:16:59,555 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-11-16 16:16:59,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:16:59,556 INFO L225 Difference]: With dead ends: 389 [2022-11-16 16:16:59,556 INFO L226 Difference]: Without dead ends: 377 [2022-11-16 16:16:59,558 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 64 SyntacticMatches, 3 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 949 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=400, Invalid=3382, Unknown=0, NotChecked=0, Total=3782 [2022-11-16 16:16:59,559 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 346 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 495 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 653 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 495 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 146 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-16 16:16:59,559 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [346 Valid, 316 Invalid, 653 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 495 Invalid, 0 Unknown, 146 Unchecked, 0.6s Time] [2022-11-16 16:16:59,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2022-11-16 16:16:59,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 172. [2022-11-16 16:16:59,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 169 states have (on average 1.2071005917159763) internal successors, (204), 171 states have internal predecessors, (204), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:59,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 204 transitions. [2022-11-16 16:16:59,567 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 204 transitions. Word has length 31 [2022-11-16 16:16:59,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:16:59,567 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 204 transitions. [2022-11-16 16:16:59,567 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:16:59,568 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 204 transitions. [2022-11-16 16:16:59,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-16 16:16:59,568 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:16:59,569 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:16:59,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-16 16:16:59,774 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:16:59,775 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:16:59,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:16:59,776 INFO L85 PathProgramCache]: Analyzing trace with hash 1934524464, now seen corresponding path program 1 times [2022-11-16 16:16:59,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:16:59,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1373941876] [2022-11-16 16:16:59,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:16:59,776 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:16:59,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:02,155 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:17:02,156 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:02,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1373941876] [2022-11-16 16:17:02,156 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1373941876] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:02,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [781504812] [2022-11-16 16:17:02,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:02,157 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:02,157 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:02,159 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:17:02,162 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-16 16:17:02,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:02,303 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 31 conjunts are in the unsatisfiable core [2022-11-16 16:17:02,305 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:17:02,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:03,008 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-16 16:17:03,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-16 16:17:03,064 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 9 proven. 10 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-16 16:17:03,064 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:17:03,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:17:03,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:17:03,612 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 9 proven. 10 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-16 16:17:03,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [781504812] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:17:03,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [276925270] [2022-11-16 16:17:03,618 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:17:03,618 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:17:03,619 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:17:03,621 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:17:03,621 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:17:03,658 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:17:03,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:17:03,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:03,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:03,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:03,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:17:03,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:03,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:03,952 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:17:03,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:17:05,744 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:17:10,179 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6796#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:17:10,179 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:17:10,179 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:17:10,180 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 10, 10] total 36 [2022-11-16 16:17:10,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1269805491] [2022-11-16 16:17:10,180 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:17:10,180 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-16 16:17:10,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:17:10,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-16 16:17:10,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=2476, Unknown=0, NotChecked=0, Total=2652 [2022-11-16 16:17:10,182 INFO L87 Difference]: Start difference. First operand 172 states and 204 transitions. Second operand has 36 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 36 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:14,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:17:14,732 INFO L93 Difference]: Finished difference Result 239 states and 271 transitions. [2022-11-16 16:17:14,733 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-16 16:17:14,733 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 36 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-16 16:17:14,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:17:14,735 INFO L225 Difference]: With dead ends: 239 [2022-11-16 16:17:14,735 INFO L226 Difference]: Without dead ends: 233 [2022-11-16 16:17:14,739 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 67 SyntacticMatches, 3 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 1585 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=459, Invalid=6021, Unknown=0, NotChecked=0, Total=6480 [2022-11-16 16:17:14,740 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 92 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 641 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 744 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 641 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 88 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-16 16:17:14,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 67 Invalid, 744 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 641 Invalid, 0 Unknown, 88 Unchecked, 0.8s Time] [2022-11-16 16:17:14,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2022-11-16 16:17:14,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 157. [2022-11-16 16:17:14,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.1753246753246753) internal successors, (181), 156 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:14,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 181 transitions. [2022-11-16 16:17:14,750 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 181 transitions. Word has length 33 [2022-11-16 16:17:14,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:17:14,751 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 181 transitions. [2022-11-16 16:17:14,751 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 36 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:14,752 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 181 transitions. [2022-11-16 16:17:14,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-16 16:17:14,753 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:17:14,753 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:17:14,763 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-16 16:17:14,953 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-11-16 16:17:14,954 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:17:14,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:17:14,954 INFO L85 PathProgramCache]: Analyzing trace with hash 1039330496, now seen corresponding path program 5 times [2022-11-16 16:17:14,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:17:14,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1287167000] [2022-11-16 16:17:14,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:14,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:17:14,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:15,478 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:17:15,478 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:15,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1287167000] [2022-11-16 16:17:15,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1287167000] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:15,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1487369910] [2022-11-16 16:17:15,479 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:17:15,479 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:15,479 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:15,480 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:17:15,488 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-16 16:17:15,785 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-16 16:17:15,785 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:17:15,788 INFO L263 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-16 16:17:15,790 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:17:16,157 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:17:16,158 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:17:16,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-16 16:17:16,593 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:17:16,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1487369910] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:17:16,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1644782696] [2022-11-16 16:17:16,595 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:17:16,595 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:17:16,596 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:17:16,596 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:17:16,596 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:17:16,624 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:17:16,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:17:16,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:17:16,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:16,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:16,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:17:16,886 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:17:16,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:17:16,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:16,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:17,021 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:17:17,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:17:17,423 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:17:20,571 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7488#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:17:20,571 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:17:20,571 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:17:20,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 27 [2022-11-16 16:17:20,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [471060743] [2022-11-16 16:17:20,572 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:17:20,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-16 16:17:20,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:17:20,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-16 16:17:20,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1525, Unknown=0, NotChecked=0, Total=1722 [2022-11-16 16:17:20,573 INFO L87 Difference]: Start difference. First operand 157 states and 181 transitions. Second operand has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:21,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:17:21,580 INFO L93 Difference]: Finished difference Result 235 states and 264 transitions. [2022-11-16 16:17:21,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-16 16:17:21,580 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-11-16 16:17:21,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:17:21,582 INFO L225 Difference]: With dead ends: 235 [2022-11-16 16:17:21,582 INFO L226 Difference]: Without dead ends: 235 [2022-11-16 16:17:21,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 63 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 850 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=357, Invalid=2193, Unknown=0, NotChecked=0, Total=2550 [2022-11-16 16:17:21,583 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 251 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 815 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 204 SdHoareTripleChecker+Invalid, 823 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 815 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:17:21,583 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 204 Invalid, 823 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 815 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:17:21,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-11-16 16:17:21,587 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 169. [2022-11-16 16:17:21,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 166 states have (on average 1.1927710843373494) internal successors, (198), 168 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:21,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 198 transitions. [2022-11-16 16:17:21,588 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 198 transitions. Word has length 33 [2022-11-16 16:17:21,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:17:21,589 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 198 transitions. [2022-11-16 16:17:21,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:21,589 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 198 transitions. [2022-11-16 16:17:21,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-16 16:17:21,590 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:17:21,590 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:17:21,596 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-11-16 16:17:21,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-11-16 16:17:21,796 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:17:21,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:17:21,797 INFO L85 PathProgramCache]: Analyzing trace with hash 276959753, now seen corresponding path program 3 times [2022-11-16 16:17:21,797 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:17:21,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524645289] [2022-11-16 16:17:21,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:21,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:17:21,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:23,051 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:17:23,051 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:23,051 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524645289] [2022-11-16 16:17:23,052 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524645289] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:23,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [60275298] [2022-11-16 16:17:23,052 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:17:23,052 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:23,052 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:23,055 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:17:23,083 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-16 16:17:23,219 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:17:23,220 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:17:23,222 INFO L263 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-16 16:17:23,224 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:17:23,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,054 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-16 16:17:24,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-16 16:17:24,058 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:17:24,058 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:17:24,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:17:24,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:17:24,573 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:17:24,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [60275298] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:17:24,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1507046954] [2022-11-16 16:17:24,575 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:17:24,575 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:17:24,575 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:17:24,576 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:17:24,576 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:17:24,602 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:17:24,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:17:24,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:24,857 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:17:24,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:17:25,272 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:17:28,684 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8171#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:17:28,684 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:17:28,684 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:17:28,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 14, 14] total 37 [2022-11-16 16:17:28,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968753547] [2022-11-16 16:17:28,685 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:17:28,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-11-16 16:17:28,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:17:28,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-11-16 16:17:28,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=2382, Unknown=0, NotChecked=0, Total=2550 [2022-11-16 16:17:28,687 INFO L87 Difference]: Start difference. First operand 169 states and 198 transitions. Second operand has 37 states, 37 states have (on average 2.4324324324324325) internal successors, (90), 37 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:33,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:17:33,626 INFO L93 Difference]: Finished difference Result 417 states and 471 transitions. [2022-11-16 16:17:33,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-16 16:17:33,627 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 2.4324324324324325) internal successors, (90), 37 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-11-16 16:17:33,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:17:33,629 INFO L225 Difference]: With dead ends: 417 [2022-11-16 16:17:33,629 INFO L226 Difference]: Without dead ends: 415 [2022-11-16 16:17:33,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 73 SyntacticMatches, 7 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 2813 ImplicationChecksByTransitivity, 8.4s TimeCoverageRelationStatistics Valid=660, Invalid=9042, Unknown=0, NotChecked=0, Total=9702 [2022-11-16 16:17:33,633 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 526 mSDsluCounter, 492 mSDsCounter, 0 mSdLazyCounter, 1676 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 526 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 1925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1676 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 230 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:17:33,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [526 Valid, 518 Invalid, 1925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1676 Invalid, 0 Unknown, 230 Unchecked, 1.4s Time] [2022-11-16 16:17:33,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 415 states. [2022-11-16 16:17:33,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 415 to 199. [2022-11-16 16:17:33,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 196 states have (on average 1.1989795918367347) internal successors, (235), 198 states have internal predecessors, (235), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:33,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 235 transitions. [2022-11-16 16:17:33,641 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 235 transitions. Word has length 36 [2022-11-16 16:17:33,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:17:33,642 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 235 transitions. [2022-11-16 16:17:33,642 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 2.4324324324324325) internal successors, (90), 37 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:33,642 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 235 transitions. [2022-11-16 16:17:33,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-16 16:17:33,643 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:17:33,643 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:17:33,660 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-16 16:17:33,855 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:33,855 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:17:33,856 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:17:33,856 INFO L85 PathProgramCache]: Analyzing trace with hash 202916299, now seen corresponding path program 4 times [2022-11-16 16:17:33,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:17:33,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396009304] [2022-11-16 16:17:33,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:33,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:17:33,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:35,374 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:17:35,375 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:35,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [396009304] [2022-11-16 16:17:35,375 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [396009304] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:35,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [751624770] [2022-11-16 16:17:35,375 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:17:35,375 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:35,376 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:35,379 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:17:35,410 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-16 16:17:35,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:35,530 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-16 16:17:35,532 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:17:35,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:17:35,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:35,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-16 16:17:36,124 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:17:36,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 10 [2022-11-16 16:17:36,173 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:17:36,173 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:17:36,269 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_652 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_652) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-16 16:17:36,277 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:17:36,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-16 16:17:36,286 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:17:36,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-16 16:17:36,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-16 16:17:36,580 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:17:36,581 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [751624770] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:17:36,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [485367425] [2022-11-16 16:17:36,582 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:17:36,582 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:17:36,583 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:17:36,583 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:17:36,583 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:17:36,616 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:17:36,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:17:36,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:36,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:36,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:36,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:17:36,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:36,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:36,887 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:17:36,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:17:37,316 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:17:42,103 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9161#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:17:42,103 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:17:42,104 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:17:42,104 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 11] total 30 [2022-11-16 16:17:42,104 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1168822454] [2022-11-16 16:17:42,104 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:17:42,104 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-16 16:17:42,104 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:17:42,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-16 16:17:42,105 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=161, Invalid=1912, Unknown=1, NotChecked=88, Total=2162 [2022-11-16 16:17:42,106 INFO L87 Difference]: Start difference. First operand 199 states and 235 transitions. Second operand has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:44,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:17:44,158 INFO L93 Difference]: Finished difference Result 304 states and 346 transitions. [2022-11-16 16:17:44,159 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-16 16:17:44,159 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-16 16:17:44,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:17:44,161 INFO L225 Difference]: With dead ends: 304 [2022-11-16 16:17:44,161 INFO L226 Difference]: Without dead ends: 246 [2022-11-16 16:17:44,161 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 83 SyntacticMatches, 1 SemanticMatches, 58 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 730 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=288, Invalid=3136, Unknown=2, NotChecked=114, Total=3540 [2022-11-16 16:17:44,161 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 52 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 565 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 655 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 565 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 84 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-16 16:17:44,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 190 Invalid, 655 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 565 Invalid, 0 Unknown, 84 Unchecked, 0.6s Time] [2022-11-16 16:17:44,162 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 246 states. [2022-11-16 16:17:44,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 246 to 243. [2022-11-16 16:17:44,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 240 states have (on average 1.175) internal successors, (282), 242 states have internal predecessors, (282), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:44,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 282 transitions. [2022-11-16 16:17:44,168 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 282 transitions. Word has length 39 [2022-11-16 16:17:44,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:17:44,169 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 282 transitions. [2022-11-16 16:17:44,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:44,169 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 282 transitions. [2022-11-16 16:17:44,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-16 16:17:44,170 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:17:44,170 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:17:44,179 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-11-16 16:17:44,375 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-11-16 16:17:44,375 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:17:44,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:17:44,376 INFO L85 PathProgramCache]: Analyzing trace with hash 94811765, now seen corresponding path program 2 times [2022-11-16 16:17:44,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:17:44,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487579835] [2022-11-16 16:17:44,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:44,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:17:44,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:45,537 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:17:45,537 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:45,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487579835] [2022-11-16 16:17:45,538 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1487579835] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:45,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1534664882] [2022-11-16 16:17:45,538 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:17:45,538 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:45,538 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:45,543 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:17:45,567 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-16 16:17:45,740 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-16 16:17:45,740 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:17:45,743 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-16 16:17:45,745 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:17:45,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:17:46,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:46,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:17:46,532 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-16 16:17:46,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-16 16:17:46,538 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 21 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:17:46,538 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:17:46,761 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:17:46,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-16 16:17:46,770 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:17:46,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-16 16:17:47,009 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 21 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:17:47,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1534664882] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:17:47,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [119480357] [2022-11-16 16:17:47,010 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:17:47,011 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:17:47,011 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:17:47,011 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:17:47,011 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:17:47,046 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:17:47,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:17:47,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:47,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:47,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:47,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:47,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:47,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:47,314 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:17:47,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:17:48,518 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:17:51,934 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10017#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:17:51,934 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:17:51,934 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:17:51,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 15] total 32 [2022-11-16 16:17:51,935 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [611657999] [2022-11-16 16:17:51,935 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:17:51,935 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-16 16:17:51,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:17:51,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-16 16:17:51,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=2152, Unknown=2, NotChecked=0, Total=2352 [2022-11-16 16:17:51,936 INFO L87 Difference]: Start difference. First operand 243 states and 282 transitions. Second operand has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 32 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:53,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:17:53,317 INFO L93 Difference]: Finished difference Result 234 states and 269 transitions. [2022-11-16 16:17:53,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-16 16:17:53,317 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 32 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-16 16:17:53,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:17:53,319 INFO L225 Difference]: With dead ends: 234 [2022-11-16 16:17:53,319 INFO L226 Difference]: Without dead ends: 193 [2022-11-16 16:17:53,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 85 SyntacticMatches, 4 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 953 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=376, Invalid=3654, Unknown=2, NotChecked=0, Total=4032 [2022-11-16 16:17:53,320 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 139 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 491 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 636 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 491 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 140 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:17:53,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [139 Valid, 183 Invalid, 636 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 491 Invalid, 0 Unknown, 140 Unchecked, 0.4s Time] [2022-11-16 16:17:53,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-11-16 16:17:53,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 192. [2022-11-16 16:17:53,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 189 states have (on average 1.1851851851851851) internal successors, (224), 191 states have internal predecessors, (224), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:53,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 224 transitions. [2022-11-16 16:17:53,331 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 224 transitions. Word has length 40 [2022-11-16 16:17:53,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:17:53,331 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 224 transitions. [2022-11-16 16:17:53,332 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.3636363636363638) internal successors, (78), 32 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:53,332 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 224 transitions. [2022-11-16 16:17:53,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-16 16:17:53,333 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:17:53,333 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:17:53,347 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-16 16:17:53,539 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-11-16 16:17:53,539 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:17:53,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:17:53,540 INFO L85 PathProgramCache]: Analyzing trace with hash 485919793, now seen corresponding path program 4 times [2022-11-16 16:17:53,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:17:53,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701083013] [2022-11-16 16:17:53,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:53,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:17:53,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:53,931 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 1 proven. 35 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:17:53,931 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:53,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [701083013] [2022-11-16 16:17:53,932 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [701083013] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:53,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [964192223] [2022-11-16 16:17:53,932 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:17:53,932 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:53,932 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:53,933 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:17:53,936 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-16 16:17:54,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:54,069 INFO L263 TraceCheckSpWp]: Trace formula consists of 301 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-16 16:17:54,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:17:54,356 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 4 proven. 32 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:17:54,356 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:17:54,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:17:54,814 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 4 proven. 32 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:17:54,815 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [964192223] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:17:54,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [610304390] [2022-11-16 16:17:54,816 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:17:54,816 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:17:54,817 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:17:54,817 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:17:54,817 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:17:54,846 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:17:54,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:17:54,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:17:54,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:54,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:54,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:55,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:17:55,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:55,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:17:55,173 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:17:55,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:17:55,331 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:17:58,671 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10750#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:17:58,672 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:17:58,672 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:17:58,672 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 25 [2022-11-16 16:17:58,672 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1461989933] [2022-11-16 16:17:58,672 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:17:58,672 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-16 16:17:58,673 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:17:58,673 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-16 16:17:58,673 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1466, Unknown=0, NotChecked=0, Total=1640 [2022-11-16 16:17:58,674 INFO L87 Difference]: Start difference. First operand 192 states and 224 transitions. Second operand has 27 states, 26 states have (on average 2.9615384615384617) internal successors, (77), 26 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:59,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:17:59,430 INFO L93 Difference]: Finished difference Result 218 states and 249 transitions. [2022-11-16 16:17:59,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-16 16:17:59,430 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.9615384615384617) internal successors, (77), 26 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-11-16 16:17:59,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:17:59,432 INFO L225 Difference]: With dead ends: 218 [2022-11-16 16:17:59,432 INFO L226 Difference]: Without dead ends: 218 [2022-11-16 16:17:59,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 85 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 736 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=426, Invalid=2436, Unknown=0, NotChecked=0, Total=2862 [2022-11-16 16:17:59,433 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 343 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 577 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 583 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 577 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:17:59,433 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [343 Valid, 97 Invalid, 583 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 577 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 16:17:59,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-11-16 16:17:59,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 195. [2022-11-16 16:17:59,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 192 states have (on average 1.1822916666666667) internal successors, (227), 194 states have internal predecessors, (227), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:59,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 227 transitions. [2022-11-16 16:17:59,436 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 227 transitions. Word has length 40 [2022-11-16 16:17:59,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:17:59,436 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 227 transitions. [2022-11-16 16:17:59,437 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.9615384615384617) internal successors, (77), 26 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:17:59,437 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 227 transitions. [2022-11-16 16:17:59,437 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-16 16:17:59,437 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:17:59,437 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:17:59,443 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-11-16 16:17:59,638 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-11-16 16:17:59,638 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:17:59,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:17:59,638 INFO L85 PathProgramCache]: Analyzing trace with hash 1463732113, now seen corresponding path program 5 times [2022-11-16 16:17:59,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:17:59,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49521611] [2022-11-16 16:17:59,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:17:59,639 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:17:59,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:17:59,982 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 38 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:17:59,982 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:17:59,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49521611] [2022-11-16 16:17:59,982 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49521611] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:17:59,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [493307893] [2022-11-16 16:17:59,983 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:17:59,983 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:17:59,983 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:17:59,984 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:00,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-16 16:18:00,159 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-16 16:18:00,159 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:18:00,161 INFO L263 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-16 16:18:00,163 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:00,437 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:18:00,437 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:00,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-16 16:18:00,829 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:18:00,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [493307893] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:00,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1455745995] [2022-11-16 16:18:00,830 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:18:00,831 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:00,831 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:00,831 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:00,831 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:00,863 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:00,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:00,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:00,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:00,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:01,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:01,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:01,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:01,102 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:01,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:01,486 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:05,533 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11472#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:05,533 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:05,533 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:05,533 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 11, 11] total 27 [2022-11-16 16:18:05,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960561717] [2022-11-16 16:18:05,533 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:05,534 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-16 16:18:05,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:05,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-16 16:18:05,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=1755, Unknown=0, NotChecked=0, Total=1980 [2022-11-16 16:18:05,535 INFO L87 Difference]: Start difference. First operand 195 states and 227 transitions. Second operand has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:06,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:06,159 INFO L93 Difference]: Finished difference Result 316 states and 360 transitions. [2022-11-16 16:18:06,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-16 16:18:06,163 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-11-16 16:18:06,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:06,164 INFO L225 Difference]: With dead ends: 316 [2022-11-16 16:18:06,165 INFO L226 Difference]: Without dead ends: 316 [2022-11-16 16:18:06,165 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 894 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=434, Invalid=2536, Unknown=0, NotChecked=0, Total=2970 [2022-11-16 16:18:06,166 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 960 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 433 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 960 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 450 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 433 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:06,166 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [960 Valid, 73 Invalid, 450 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 433 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 16:18:06,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-11-16 16:18:06,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 243. [2022-11-16 16:18:06,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 240 states have (on average 1.1875) internal successors, (285), 242 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:06,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 285 transitions. [2022-11-16 16:18:06,173 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 285 transitions. Word has length 41 [2022-11-16 16:18:06,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:06,173 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 285 transitions. [2022-11-16 16:18:06,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:06,173 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 285 transitions. [2022-11-16 16:18:06,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-16 16:18:06,174 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:06,174 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:06,180 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:06,380 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-11-16 16:18:06,380 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:06,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:06,381 INFO L85 PathProgramCache]: Analyzing trace with hash 525396335, now seen corresponding path program 3 times [2022-11-16 16:18:06,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:06,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728113350] [2022-11-16 16:18:06,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:06,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:06,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:06,751 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 1 proven. 37 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:06,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:18:06,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728113350] [2022-11-16 16:18:06,752 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728113350] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:18:06,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1729649687] [2022-11-16 16:18:06,752 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:18:06,752 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:06,752 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:18:06,754 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:06,755 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-16 16:18:06,911 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:18:06,911 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:18:06,914 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 34 conjunts are in the unsatisfiable core [2022-11-16 16:18:06,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:07,155 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:07,156 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:07,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:18:07,533 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:07,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1729649687] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:07,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [276589547] [2022-11-16 16:18:07,535 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:18:07,535 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:07,535 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:07,535 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:07,535 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:07,558 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:07,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:07,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:07,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:07,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:07,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:07,767 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:18:07,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:18:07,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:07,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:07,885 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:07,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:09,341 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:12,287 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12339#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:12,287 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:12,287 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:12,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-16 16:18:12,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619089562] [2022-11-16 16:18:12,288 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:12,288 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-16 16:18:12,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:12,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-16 16:18:12,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=1537, Unknown=0, NotChecked=0, Total=1722 [2022-11-16 16:18:12,289 INFO L87 Difference]: Start difference. First operand 243 states and 285 transitions. Second operand has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:13,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:13,364 INFO L93 Difference]: Finished difference Result 275 states and 312 transitions. [2022-11-16 16:18:13,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-16 16:18:13,365 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-16 16:18:13,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:13,366 INFO L225 Difference]: With dead ends: 275 [2022-11-16 16:18:13,366 INFO L226 Difference]: Without dead ends: 275 [2022-11-16 16:18:13,367 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=522, Invalid=2900, Unknown=0, NotChecked=0, Total=3422 [2022-11-16 16:18:13,367 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 636 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 621 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 636 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 634 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 621 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:13,368 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [636 Valid, 97 Invalid, 634 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 621 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-16 16:18:13,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-11-16 16:18:13,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 243. [2022-11-16 16:18:13,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 240 states have (on average 1.1833333333333333) internal successors, (284), 242 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:13,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 284 transitions. [2022-11-16 16:18:13,374 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 284 transitions. Word has length 42 [2022-11-16 16:18:13,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:13,374 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 284 transitions. [2022-11-16 16:18:13,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:13,374 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 284 transitions. [2022-11-16 16:18:13,375 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-16 16:18:13,375 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:13,375 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:13,391 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:13,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-11-16 16:18:13,583 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:13,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:13,583 INFO L85 PathProgramCache]: Analyzing trace with hash -1182475613, now seen corresponding path program 6 times [2022-11-16 16:18:13,583 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:13,583 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1566180234] [2022-11-16 16:18:13,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:13,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:13,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:14,057 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:14,057 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:18:14,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1566180234] [2022-11-16 16:18:14,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1566180234] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:18:14,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1409465501] [2022-11-16 16:18:14,057 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:18:14,058 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:14,058 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:18:14,059 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:14,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-16 16:18:14,243 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:18:14,244 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:18:14,246 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-16 16:18:14,247 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:14,260 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-16 16:18:14,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-16 16:18:14,484 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:14,485 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:14,960 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:14,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1409465501] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:14,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1790625365] [2022-11-16 16:18:14,961 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:18:14,962 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:14,962 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:14,962 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:14,962 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:14,984 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:14,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:15,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:15,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:15,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:15,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:15,199 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:18:15,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:18:15,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:15,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:15,302 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:15,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:15,579 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:18,494 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13187#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:18,494 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:18,494 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:18,494 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 33 [2022-11-16 16:18:18,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544897740] [2022-11-16 16:18:18,495 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:18,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-16 16:18:18,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:18,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-16 16:18:18,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=257, Invalid=1999, Unknown=0, NotChecked=0, Total=2256 [2022-11-16 16:18:18,496 INFO L87 Difference]: Start difference. First operand 243 states and 284 transitions. Second operand has 34 states, 33 states have (on average 2.878787878787879) internal successors, (95), 34 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:19,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:19,532 INFO L93 Difference]: Finished difference Result 444 states and 513 transitions. [2022-11-16 16:18:19,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-16 16:18:19,539 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 2.878787878787879) internal successors, (95), 34 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-11-16 16:18:19,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:19,541 INFO L225 Difference]: With dead ends: 444 [2022-11-16 16:18:19,541 INFO L226 Difference]: Without dead ends: 444 [2022-11-16 16:18:19,541 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 969 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=513, Invalid=2909, Unknown=0, NotChecked=0, Total=3422 [2022-11-16 16:18:19,542 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 414 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 1113 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 414 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 1120 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:19,542 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [414 Valid, 311 Invalid, 1120 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1113 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:18:19,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 444 states. [2022-11-16 16:18:19,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 444 to 338. [2022-11-16 16:18:19,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 335 states have (on average 1.2208955223880598) internal successors, (409), 337 states have internal predecessors, (409), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:19,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 409 transitions. [2022-11-16 16:18:19,550 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 409 transitions. Word has length 42 [2022-11-16 16:18:19,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:19,551 INFO L495 AbstractCegarLoop]: Abstraction has 338 states and 409 transitions. [2022-11-16 16:18:19,551 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 2.878787878787879) internal successors, (95), 34 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:19,551 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 409 transitions. [2022-11-16 16:18:19,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-16 16:18:19,552 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:19,552 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:19,558 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:19,757 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-11-16 16:18:19,758 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:19,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:19,758 INFO L85 PathProgramCache]: Analyzing trace with hash -487556779, now seen corresponding path program 4 times [2022-11-16 16:18:19,758 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:19,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1973075718] [2022-11-16 16:18:19,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:19,759 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:19,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:20,152 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 1 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:18:20,153 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:18:20,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1973075718] [2022-11-16 16:18:20,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1973075718] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:18:20,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [129398759] [2022-11-16 16:18:20,153 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:18:20,153 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:20,153 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:18:20,155 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:20,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-11-16 16:18:20,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:20,331 INFO L263 TraceCheckSpWp]: Trace formula consists of 311 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-16 16:18:20,332 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:20,643 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:18:20,643 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:20,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:18:21,057 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:18:21,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [129398759] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:21,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1542832176] [2022-11-16 16:18:21,059 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:18:21,059 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:21,059 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:21,059 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:21,060 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:21,092 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:21,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:21,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:21,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:21,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:21,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:21,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:21,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:21,341 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:21,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:22,505 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:25,412 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14289#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:25,412 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:25,412 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:25,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-11-16 16:18:25,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1062392743] [2022-11-16 16:18:25,413 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:25,413 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-16 16:18:25,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:25,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-16 16:18:25,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=1536, Unknown=0, NotChecked=0, Total=1722 [2022-11-16 16:18:25,414 INFO L87 Difference]: Start difference. First operand 338 states and 409 transitions. Second operand has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:26,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:26,303 INFO L93 Difference]: Finished difference Result 390 states and 452 transitions. [2022-11-16 16:18:26,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-16 16:18:26,303 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-16 16:18:26,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:26,305 INFO L225 Difference]: With dead ends: 390 [2022-11-16 16:18:26,305 INFO L226 Difference]: Without dead ends: 390 [2022-11-16 16:18:26,306 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 96 SyntacticMatches, 4 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 870 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=490, Invalid=2816, Unknown=0, NotChecked=0, Total=3306 [2022-11-16 16:18:26,306 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 742 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 478 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 742 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 492 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 478 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:26,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [742 Valid, 80 Invalid, 492 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 478 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 16:18:26,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 390 states. [2022-11-16 16:18:26,312 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 390 to 338. [2022-11-16 16:18:26,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 335 states have (on average 1.2119402985074628) internal successors, (406), 337 states have internal predecessors, (406), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:26,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 406 transitions. [2022-11-16 16:18:26,313 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 406 transitions. Word has length 44 [2022-11-16 16:18:26,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:26,314 INFO L495 AbstractCegarLoop]: Abstraction has 338 states and 406 transitions. [2022-11-16 16:18:26,314 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:26,314 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 406 transitions. [2022-11-16 16:18:26,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-16 16:18:26,315 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:26,315 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:26,325 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:26,520 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:26,521 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:26,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:26,521 INFO L85 PathProgramCache]: Analyzing trace with hash 192165190, now seen corresponding path program 5 times [2022-11-16 16:18:26,521 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:26,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2138613135] [2022-11-16 16:18:26,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:26,521 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:26,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:27,671 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 16 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:18:27,671 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:18:27,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2138613135] [2022-11-16 16:18:27,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2138613135] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:18:27,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [737569794] [2022-11-16 16:18:27,672 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:18:27,672 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:27,672 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:18:27,673 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:27,676 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-11-16 16:18:27,919 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-16 16:18:27,919 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:18:27,922 INFO L263 TraceCheckSpWp]: Trace formula consists of 331 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-16 16:18:27,923 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:27,940 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-16 16:18:27,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-16 16:18:28,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-16 16:18:29,467 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:18:29,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 36 treesize of output 17 [2022-11-16 16:18:29,475 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 42 proven. 20 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:29,475 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:30,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-16 16:18:30,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-16 16:18:30,979 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 38 proven. 24 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:30,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [737569794] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:30,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [309109628] [2022-11-16 16:18:30,983 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:18:30,983 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:30,984 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:30,984 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:30,984 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:31,021 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:31,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:31,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:31,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:31,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:31,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:31,248 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:18:31,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:18:31,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:31,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:31,353 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:31,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:31,631 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:35,223 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15379#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:35,223 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:35,223 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:35,223 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 16, 16] total 49 [2022-11-16 16:18:35,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [807731688] [2022-11-16 16:18:35,223 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:35,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-16 16:18:35,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:35,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-16 16:18:35,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=278, Invalid=3754, Unknown=0, NotChecked=0, Total=4032 [2022-11-16 16:18:35,225 INFO L87 Difference]: Start difference. First operand 338 states and 406 transitions. Second operand has 50 states, 50 states have (on average 2.44) internal successors, (122), 49 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:39,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:39,540 INFO L93 Difference]: Finished difference Result 491 states and 578 transitions. [2022-11-16 16:18:39,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-11-16 16:18:39,541 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 50 states have (on average 2.44) internal successors, (122), 49 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-11-16 16:18:39,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:39,543 INFO L225 Difference]: With dead ends: 491 [2022-11-16 16:18:39,543 INFO L226 Difference]: Without dead ends: 489 [2022-11-16 16:18:39,545 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 203 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3214 ImplicationChecksByTransitivity, 9.7s TimeCoverageRelationStatistics Valid=1138, Invalid=11072, Unknown=0, NotChecked=0, Total=12210 [2022-11-16 16:18:39,545 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 257 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 538 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 259 SdHoareTripleChecker+Invalid, 705 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 538 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 126 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:39,545 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 259 Invalid, 705 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 538 Invalid, 0 Unknown, 126 Unchecked, 0.5s Time] [2022-11-16 16:18:39,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 489 states. [2022-11-16 16:18:39,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 489 to 375. [2022-11-16 16:18:39,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 375 states, 372 states have (on average 1.2150537634408602) internal successors, (452), 374 states have internal predecessors, (452), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:39,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 452 transitions. [2022-11-16 16:18:39,553 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 452 transitions. Word has length 45 [2022-11-16 16:18:39,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:39,553 INFO L495 AbstractCegarLoop]: Abstraction has 375 states and 452 transitions. [2022-11-16 16:18:39,553 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 50 states have (on average 2.44) internal successors, (122), 49 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:39,554 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 452 transitions. [2022-11-16 16:18:39,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-16 16:18:39,554 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:39,555 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:39,565 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:39,760 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:39,761 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:39,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:39,761 INFO L85 PathProgramCache]: Analyzing trace with hash -1915195704, now seen corresponding path program 5 times [2022-11-16 16:18:39,761 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:39,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1227007267] [2022-11-16 16:18:39,762 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:39,762 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:39,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:40,485 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:40,485 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:18:40,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1227007267] [2022-11-16 16:18:40,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1227007267] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:18:40,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1315713144] [2022-11-16 16:18:40,486 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:18:40,486 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:40,486 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:18:40,487 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:40,489 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-16 16:18:40,680 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-16 16:18:40,680 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:18:40,683 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-16 16:18:40,688 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:40,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-16 16:18:41,670 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:18:41,673 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:18:41,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 31 treesize of output 20 [2022-11-16 16:18:41,676 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 8 proven. 49 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:18:41,676 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:41,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:18:41,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:18:42,186 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 8 proven. 47 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-16 16:18:42,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1315713144] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:42,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1732026543] [2022-11-16 16:18:42,188 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:18:42,188 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:42,188 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:42,188 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:42,189 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:42,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:42,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:42,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:42,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:42,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:42,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:18:42,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:42,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:42,451 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:42,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:43,738 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:47,580 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16673#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:47,580 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:47,580 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:47,581 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 15, 14] total 42 [2022-11-16 16:18:47,581 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [804554984] [2022-11-16 16:18:47,581 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:47,581 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-11-16 16:18:47,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:47,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-11-16 16:18:47,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=216, Invalid=3090, Unknown=0, NotChecked=0, Total=3306 [2022-11-16 16:18:47,582 INFO L87 Difference]: Start difference. First operand 375 states and 452 transitions. Second operand has 42 states, 42 states have (on average 2.9285714285714284) internal successors, (123), 42 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:52,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:52,092 INFO L93 Difference]: Finished difference Result 733 states and 840 transitions. [2022-11-16 16:18:52,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2022-11-16 16:18:52,093 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 2.9285714285714284) internal successors, (123), 42 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-11-16 16:18:52,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:52,096 INFO L225 Difference]: With dead ends: 733 [2022-11-16 16:18:52,097 INFO L226 Difference]: Without dead ends: 727 [2022-11-16 16:18:52,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 216 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 116 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3390 ImplicationChecksByTransitivity, 8.1s TimeCoverageRelationStatistics Valid=886, Invalid=12920, Unknown=0, NotChecked=0, Total=13806 [2022-11-16 16:18:52,099 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 699 mSDsluCounter, 870 mSDsCounter, 0 mSdLazyCounter, 1935 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 699 SdHoareTripleChecker+Valid, 910 SdHoareTripleChecker+Invalid, 2385 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 1935 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 432 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:52,099 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [699 Valid, 910 Invalid, 2385 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 1935 Invalid, 0 Unknown, 432 Unchecked, 1.3s Time] [2022-11-16 16:18:52,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2022-11-16 16:18:52,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 478. [2022-11-16 16:18:52,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 478 states, 475 states have (on average 1.2) internal successors, (570), 477 states have internal predecessors, (570), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:52,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 478 states to 478 states and 570 transitions. [2022-11-16 16:18:52,111 INFO L78 Accepts]: Start accepts. Automaton has 478 states and 570 transitions. Word has length 47 [2022-11-16 16:18:52,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:52,111 INFO L495 AbstractCegarLoop]: Abstraction has 478 states and 570 transitions. [2022-11-16 16:18:52,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 2.9285714285714284) internal successors, (123), 42 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:52,112 INFO L276 IsEmpty]: Start isEmpty. Operand 478 states and 570 transitions. [2022-11-16 16:18:52,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-16 16:18:52,113 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:52,113 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:52,123 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:52,318 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-11-16 16:18:52,319 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:52,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:52,319 INFO L85 PathProgramCache]: Analyzing trace with hash -1181832418, now seen corresponding path program 6 times [2022-11-16 16:18:52,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:52,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [584097373] [2022-11-16 16:18:52,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:52,319 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:52,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:18:52,751 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 4 proven. 58 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:18:52,751 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:18:52,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [584097373] [2022-11-16 16:18:52,751 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [584097373] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:18:52,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [44430992] [2022-11-16 16:18:52,752 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:18:52,752 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:18:52,752 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:18:52,753 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:18:52,755 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-11-16 16:18:52,935 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:18:52,935 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:18:52,938 INFO L263 TraceCheckSpWp]: Trace formula consists of 357 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-16 16:18:52,939 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:18:53,594 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:18:53,594 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:18:54,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:18:54,266 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:18:54,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [44430992] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:18:54,267 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1916414625] [2022-11-16 16:18:54,268 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:18:54,268 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:18:54,268 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:18:54,268 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:18:54,269 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:18:54,298 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:18:54,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:18:54,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:54,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:54,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:54,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:54,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:54,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:18:54,538 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:18:54,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:18:54,813 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:18:58,051 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18348#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:18:58,052 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:18:58,052 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:18:58,052 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 38 [2022-11-16 16:18:58,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1561209584] [2022-11-16 16:18:58,052 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:18:58,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-16 16:18:58,053 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:18:58,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-16 16:18:58,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=264, Invalid=2598, Unknown=0, NotChecked=0, Total=2862 [2022-11-16 16:18:58,053 INFO L87 Difference]: Start difference. First operand 478 states and 570 transitions. Second operand has 40 states, 39 states have (on average 3.1538461538461537) internal successors, (123), 39 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:59,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:18:59,471 INFO L93 Difference]: Finished difference Result 833 states and 982 transitions. [2022-11-16 16:18:59,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-16 16:18:59,483 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 39 states have (on average 3.1538461538461537) internal successors, (123), 39 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-11-16 16:18:59,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:18:59,486 INFO L225 Difference]: With dead ends: 833 [2022-11-16 16:18:59,486 INFO L226 Difference]: Without dead ends: 833 [2022-11-16 16:18:59,486 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 105 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1119 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=708, Invalid=4262, Unknown=0, NotChecked=0, Total=4970 [2022-11-16 16:18:59,487 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 404 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 1066 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 404 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 1075 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1066 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:18:59,487 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [404 Valid, 237 Invalid, 1075 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 1066 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:18:59,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 833 states. [2022-11-16 16:18:59,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 833 to 481. [2022-11-16 16:18:59,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 481 states, 478 states have (on average 1.198744769874477) internal successors, (573), 480 states have internal predecessors, (573), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:59,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 481 states to 481 states and 573 transitions. [2022-11-16 16:18:59,498 INFO L78 Accepts]: Start accepts. Automaton has 481 states and 573 transitions. Word has length 49 [2022-11-16 16:18:59,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:18:59,499 INFO L495 AbstractCegarLoop]: Abstraction has 481 states and 573 transitions. [2022-11-16 16:18:59,499 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 39 states have (on average 3.1538461538461537) internal successors, (123), 39 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:18:59,499 INFO L276 IsEmpty]: Start isEmpty. Operand 481 states and 573 transitions. [2022-11-16 16:18:59,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-16 16:18:59,500 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:18:59,500 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:18:59,506 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-11-16 16:18:59,706 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-11-16 16:18:59,706 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:18:59,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:18:59,706 INFO L85 PathProgramCache]: Analyzing trace with hash 999448052, now seen corresponding path program 6 times [2022-11-16 16:18:59,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:18:59,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680902104] [2022-11-16 16:18:59,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:18:59,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:18:59,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:00,336 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:19:00,337 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:00,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680902104] [2022-11-16 16:19:00,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680902104] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:00,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1129248026] [2022-11-16 16:19:00,337 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:19:00,337 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:00,337 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:00,339 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:00,353 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-11-16 16:19:00,534 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:19:00,534 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:19:00,537 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-16 16:19:00,539 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:00,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:19:00,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:00,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:19:00,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-16 16:19:00,995 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:19:00,995 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:01,152 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:19:01,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-16 16:19:01,172 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:19:01,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-16 16:19:01,353 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:19:01,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1129248026] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:01,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2109823872] [2022-11-16 16:19:01,354 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:19:01,354 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:01,354 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:01,354 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:01,355 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:01,374 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:01,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:01,412 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:01,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:01,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:01,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:19:01,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:01,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:01,603 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:01,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:01,984 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:06,036 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20030#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:06,036 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:06,037 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:06,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 25 [2022-11-16 16:19:06,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994940379] [2022-11-16 16:19:06,037 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:06,037 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-16 16:19:06,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:06,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-16 16:19:06,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1562, Unknown=4, NotChecked=0, Total=1722 [2022-11-16 16:19:06,038 INFO L87 Difference]: Start difference. First operand 481 states and 573 transitions. Second operand has 26 states, 26 states have (on average 3.3076923076923075) internal successors, (86), 25 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:06,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:06,637 INFO L93 Difference]: Finished difference Result 712 states and 827 transitions. [2022-11-16 16:19:06,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-16 16:19:06,637 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 3.3076923076923075) internal successors, (86), 25 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-11-16 16:19:06,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:06,639 INFO L225 Difference]: With dead ends: 712 [2022-11-16 16:19:06,639 INFO L226 Difference]: Without dead ends: 622 [2022-11-16 16:19:06,639 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 118 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 592 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=250, Invalid=2398, Unknown=4, NotChecked=0, Total=2652 [2022-11-16 16:19:06,640 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 130 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 403 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 445 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 403 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 37 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:06,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 213 Invalid, 445 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 403 Invalid, 0 Unknown, 37 Unchecked, 0.3s Time] [2022-11-16 16:19:06,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 622 states. [2022-11-16 16:19:06,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 622 to 605. [2022-11-16 16:19:06,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 605 states, 602 states have (on average 1.1777408637873754) internal successors, (709), 604 states have internal predecessors, (709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:06,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 605 states to 605 states and 709 transitions. [2022-11-16 16:19:06,651 INFO L78 Accepts]: Start accepts. Automaton has 605 states and 709 transitions. Word has length 50 [2022-11-16 16:19:06,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:06,651 INFO L495 AbstractCegarLoop]: Abstraction has 605 states and 709 transitions. [2022-11-16 16:19:06,651 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 3.3076923076923075) internal successors, (86), 25 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:06,651 INFO L276 IsEmpty]: Start isEmpty. Operand 605 states and 709 transitions. [2022-11-16 16:19:06,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-16 16:19:06,653 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:06,653 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:06,661 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-11-16 16:19:06,859 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:06,859 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:06,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:06,859 INFO L85 PathProgramCache]: Analyzing trace with hash 49454004, now seen corresponding path program 6 times [2022-11-16 16:19:06,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:06,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336799676] [2022-11-16 16:19:06,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:06,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:06,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:07,679 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:19:07,679 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:07,679 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336799676] [2022-11-16 16:19:07,680 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336799676] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:07,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [290951183] [2022-11-16 16:19:07,680 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:19:07,680 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:07,680 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:07,682 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:07,690 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-16 16:19:07,867 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:19:07,867 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:19:07,870 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 60 conjunts are in the unsatisfiable core [2022-11-16 16:19:07,872 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:07,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 16 [2022-11-16 16:19:08,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:08,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:19:08,496 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-16 16:19:08,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-16 16:19:08,500 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:19:08,500 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:08,695 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:19:08,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-16 16:19:08,703 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:19:08,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-16 16:19:08,957 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:19:08,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [290951183] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:08,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [625149768] [2022-11-16 16:19:08,959 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:19:08,959 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:08,959 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:08,960 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:08,960 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:08,992 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:08,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:09,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:19:09,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:09,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:09,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:09,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:19:09,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:09,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:09,292 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:09,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:09,903 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:13,424 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21716#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:13,424 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:13,424 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:13,424 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17, 17] total 32 [2022-11-16 16:19:13,425 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1469486681] [2022-11-16 16:19:13,425 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:13,425 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-16 16:19:13,425 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:13,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-16 16:19:13,426 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=2161, Unknown=4, NotChecked=0, Total=2352 [2022-11-16 16:19:13,426 INFO L87 Difference]: Start difference. First operand 605 states and 709 transitions. Second operand has 33 states, 33 states have (on average 2.6363636363636362) internal successors, (87), 32 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:14,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:14,507 INFO L93 Difference]: Finished difference Result 589 states and 684 transitions. [2022-11-16 16:19:14,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-16 16:19:14,508 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 2.6363636363636362) internal successors, (87), 32 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-16 16:19:14,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:14,509 INFO L225 Difference]: With dead ends: 589 [2022-11-16 16:19:14,510 INFO L226 Difference]: Without dead ends: 483 [2022-11-16 16:19:14,510 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 117 SyntacticMatches, 4 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 882 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=337, Invalid=3441, Unknown=4, NotChecked=0, Total=3782 [2022-11-16 16:19:14,511 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 95 mSDsluCounter, 293 mSDsCounter, 0 mSdLazyCounter, 802 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 891 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 802 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 84 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:14,511 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 314 Invalid, 891 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 802 Invalid, 0 Unknown, 84 Unchecked, 0.5s Time] [2022-11-16 16:19:14,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 483 states. [2022-11-16 16:19:14,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 483 to 480. [2022-11-16 16:19:14,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 477 states have (on average 1.1865828092243187) internal successors, (566), 479 states have internal predecessors, (566), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:14,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 566 transitions. [2022-11-16 16:19:14,519 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 566 transitions. Word has length 51 [2022-11-16 16:19:14,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:14,519 INFO L495 AbstractCegarLoop]: Abstraction has 480 states and 566 transitions. [2022-11-16 16:19:14,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 2.6363636363636362) internal successors, (87), 32 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:14,520 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 566 transitions. [2022-11-16 16:19:14,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-16 16:19:14,521 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:14,521 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:14,527 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-16 16:19:14,727 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-11-16 16:19:14,727 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:14,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:14,727 INFO L85 PathProgramCache]: Analyzing trace with hash 523030176, now seen corresponding path program 7 times [2022-11-16 16:19:14,727 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:14,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1831254562] [2022-11-16 16:19:14,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:14,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:14,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:15,220 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 4 proven. 60 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:15,221 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:15,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1831254562] [2022-11-16 16:19:15,221 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1831254562] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:15,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [566148856] [2022-11-16 16:19:15,221 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:19:15,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:15,221 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:15,223 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:15,250 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-11-16 16:19:15,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:15,418 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-16 16:19:15,420 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:15,723 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:15,723 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:16,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:19:16,158 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:16,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [566148856] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:16,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1678662226] [2022-11-16 16:19:16,159 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:19:16,159 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:16,160 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:16,160 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:16,160 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:16,185 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:16,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:16,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:16,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:16,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:16,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:16,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:16,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:16,410 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:16,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:17,519 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:20,496 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23157#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:20,496 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:20,496 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:20,496 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-16 16:19:20,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432432383] [2022-11-16 16:19:20,497 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:20,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-16 16:19:20,497 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:20,497 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-16 16:19:20,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1864, Unknown=0, NotChecked=0, Total=2070 [2022-11-16 16:19:20,498 INFO L87 Difference]: Start difference. First operand 480 states and 566 transitions. Second operand has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:21,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:21,939 INFO L93 Difference]: Finished difference Result 546 states and 626 transitions. [2022-11-16 16:19:21,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-16 16:19:21,940 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-16 16:19:21,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:21,941 INFO L225 Difference]: With dead ends: 546 [2022-11-16 16:19:21,941 INFO L226 Difference]: Without dead ends: 546 [2022-11-16 16:19:21,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 114 SyntacticMatches, 5 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1219 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=714, Invalid=3842, Unknown=0, NotChecked=0, Total=4556 [2022-11-16 16:19:21,941 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 444 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 784 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 444 SdHoareTripleChecker+Valid, 170 SdHoareTripleChecker+Invalid, 804 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 784 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:21,941 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [444 Valid, 170 Invalid, 804 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 784 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-16 16:19:21,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 546 states. [2022-11-16 16:19:21,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 546 to 483. [2022-11-16 16:19:21,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 483 states, 480 states have (on average 1.1833333333333333) internal successors, (568), 482 states have internal predecessors, (568), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:21,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 483 states to 483 states and 568 transitions. [2022-11-16 16:19:21,950 INFO L78 Accepts]: Start accepts. Automaton has 483 states and 568 transitions. Word has length 51 [2022-11-16 16:19:21,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:21,950 INFO L495 AbstractCegarLoop]: Abstraction has 483 states and 568 transitions. [2022-11-16 16:19:21,950 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:21,950 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 568 transitions. [2022-11-16 16:19:21,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-16 16:19:21,951 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:21,952 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:21,959 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2022-11-16 16:19:22,157 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable46,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:22,158 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:22,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:22,158 INFO L85 PathProgramCache]: Analyzing trace with hash -1869548976, now seen corresponding path program 7 times [2022-11-16 16:19:22,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:22,158 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524051917] [2022-11-16 16:19:22,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:22,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:22,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:22,707 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:22,708 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:22,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524051917] [2022-11-16 16:19:22,708 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524051917] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:22,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [695277931] [2022-11-16 16:19:22,708 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:19:22,708 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:22,708 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:22,709 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:22,734 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-11-16 16:19:22,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:22,910 INFO L263 TraceCheckSpWp]: Trace formula consists of 373 conjuncts, 40 conjunts are in the unsatisfiable core [2022-11-16 16:19:22,912 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:23,239 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:23,239 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:23,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:19:23,688 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:23,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [695277931] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:23,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1726479850] [2022-11-16 16:19:23,690 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:19:23,690 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:23,691 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:23,691 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:23,691 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:23,717 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:23,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:23,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:23,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:23,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:23,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:19:23,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:23,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:23,939 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:23,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:24,207 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:27,101 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24579#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:27,101 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:27,101 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:27,101 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 32 [2022-11-16 16:19:27,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1945244388] [2022-11-16 16:19:27,102 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:27,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-16 16:19:27,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:27,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-16 16:19:27,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=1927, Unknown=0, NotChecked=0, Total=2162 [2022-11-16 16:19:27,103 INFO L87 Difference]: Start difference. First operand 483 states and 568 transitions. Second operand has 33 states, 32 states have (on average 3.0625) internal successors, (98), 33 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:28,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:28,242 INFO L93 Difference]: Finished difference Result 719 states and 832 transitions. [2022-11-16 16:19:28,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-16 16:19:28,242 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 3.0625) internal successors, (98), 33 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-11-16 16:19:28,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:28,244 INFO L225 Difference]: With dead ends: 719 [2022-11-16 16:19:28,244 INFO L226 Difference]: Without dead ends: 719 [2022-11-16 16:19:28,244 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 114 SyntacticMatches, 6 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1097 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=511, Invalid=3029, Unknown=0, NotChecked=0, Total=3540 [2022-11-16 16:19:28,244 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 529 mSDsluCounter, 335 mSDsCounter, 0 mSdLazyCounter, 1215 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 529 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 1223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 1215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:28,244 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [529 Valid, 380 Invalid, 1223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 1215 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-16 16:19:28,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 719 states. [2022-11-16 16:19:28,251 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 719 to 593. [2022-11-16 16:19:28,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 593 states, 590 states have (on average 1.2067796610169492) internal successors, (712), 592 states have internal predecessors, (712), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:28,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 593 states to 593 states and 712 transitions. [2022-11-16 16:19:28,254 INFO L78 Accepts]: Start accepts. Automaton has 593 states and 712 transitions. Word has length 51 [2022-11-16 16:19:28,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:28,254 INFO L495 AbstractCegarLoop]: Abstraction has 593 states and 712 transitions. [2022-11-16 16:19:28,254 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 3.0625) internal successors, (98), 33 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:28,254 INFO L276 IsEmpty]: Start isEmpty. Operand 593 states and 712 transitions. [2022-11-16 16:19:28,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-16 16:19:28,255 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:28,256 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:28,267 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-11-16 16:19:28,461 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-11-16 16:19:28,461 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:28,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:28,462 INFO L85 PathProgramCache]: Analyzing trace with hash 2024256823, now seen corresponding path program 8 times [2022-11-16 16:19:28,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:28,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [577999617] [2022-11-16 16:19:28,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:28,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:28,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:29,222 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 20 proven. 56 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:19:29,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:29,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [577999617] [2022-11-16 16:19:29,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [577999617] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:29,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [885980824] [2022-11-16 16:19:29,223 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:19:29,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:29,223 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:29,224 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:29,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-16 16:19:29,451 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-16 16:19:29,451 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:19:29,454 INFO L263 TraceCheckSpWp]: Trace formula consists of 366 conjuncts, 43 conjunts are in the unsatisfiable core [2022-11-16 16:19:29,455 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:29,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:30,142 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-16 16:19:30,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-16 16:19:30,145 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 10 proven. 64 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:30,145 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:30,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:19:30,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:19:30,581 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 10 proven. 64 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:30,581 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [885980824] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:30,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [295473722] [2022-11-16 16:19:30,582 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:19:30,582 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:30,582 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:30,583 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:30,583 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:30,616 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:30,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:30,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:30,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:30,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:30,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:19:30,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:30,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:30,837 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:30,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:31,941 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:35,384 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '26273#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:35,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:35,384 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:35,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 14] total 36 [2022-11-16 16:19:35,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587254580] [2022-11-16 16:19:35,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:35,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-16 16:19:35,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:35,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-16 16:19:35,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=179, Invalid=2473, Unknown=0, NotChecked=0, Total=2652 [2022-11-16 16:19:35,385 INFO L87 Difference]: Start difference. First operand 593 states and 712 transitions. Second operand has 36 states, 36 states have (on average 3.2222222222222223) internal successors, (116), 36 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:37,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:37,408 INFO L93 Difference]: Finished difference Result 588 states and 686 transitions. [2022-11-16 16:19:37,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-16 16:19:37,409 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 3.2222222222222223) internal successors, (116), 36 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-16 16:19:37,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:37,410 INFO L225 Difference]: With dead ends: 588 [2022-11-16 16:19:37,411 INFO L226 Difference]: Without dead ends: 535 [2022-11-16 16:19:37,411 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 119 SyntacticMatches, 3 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 1666 ImplicationChecksByTransitivity, 6.0s TimeCoverageRelationStatistics Valid=423, Invalid=6549, Unknown=0, NotChecked=0, Total=6972 [2022-11-16 16:19:37,411 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 69 mSDsluCounter, 552 mSDsCounter, 0 mSdLazyCounter, 632 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 585 SdHoareTripleChecker+Invalid, 1132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 632 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 487 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:37,412 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 585 Invalid, 1132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 632 Invalid, 0 Unknown, 487 Unchecked, 0.4s Time] [2022-11-16 16:19:37,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-11-16 16:19:37,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 461. [2022-11-16 16:19:37,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 458 states have (on average 1.2096069868995634) internal successors, (554), 460 states have internal predecessors, (554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:37,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 554 transitions. [2022-11-16 16:19:37,420 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 554 transitions. Word has length 52 [2022-11-16 16:19:37,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:37,420 INFO L495 AbstractCegarLoop]: Abstraction has 461 states and 554 transitions. [2022-11-16 16:19:37,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 3.2222222222222223) internal successors, (116), 36 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:37,421 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 554 transitions. [2022-11-16 16:19:37,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-16 16:19:37,422 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:37,422 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:37,428 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-16 16:19:37,627 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-11-16 16:19:37,628 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:37,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:37,628 INFO L85 PathProgramCache]: Analyzing trace with hash -620978066, now seen corresponding path program 7 times [2022-11-16 16:19:37,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:37,628 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009458626] [2022-11-16 16:19:37,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:37,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:37,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:38,021 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 4 proven. 70 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:19:38,021 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:38,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009458626] [2022-11-16 16:19:38,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009458626] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:38,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1677304620] [2022-11-16 16:19:38,021 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:19:38,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:38,022 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:38,022 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:38,024 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-11-16 16:19:38,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:38,194 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 37 conjunts are in the unsatisfiable core [2022-11-16 16:19:38,196 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:38,483 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:19:38,483 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:38,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:19:38,891 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:19:38,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1677304620] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:38,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [155975390] [2022-11-16 16:19:38,892 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:19:38,892 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:38,892 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:38,893 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:38,893 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:38,908 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:38,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:38,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:38,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:39,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:39,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:39,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:39,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:39,154 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:39,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:39,539 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:43,549 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27737#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:43,549 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:43,549 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:43,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 26 [2022-11-16 16:19:43,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [781908565] [2022-11-16 16:19:43,549 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:43,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-16 16:19:43,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:43,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-16 16:19:43,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1684, Unknown=0, NotChecked=0, Total=1892 [2022-11-16 16:19:43,550 INFO L87 Difference]: Start difference. First operand 461 states and 554 transitions. Second operand has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:44,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:44,136 INFO L93 Difference]: Finished difference Result 680 states and 819 transitions. [2022-11-16 16:19:44,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-16 16:19:44,136 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-11-16 16:19:44,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:44,139 INFO L225 Difference]: With dead ends: 680 [2022-11-16 16:19:44,139 INFO L226 Difference]: Without dead ends: 680 [2022-11-16 16:19:44,139 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 118 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 793 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=359, Invalid=2293, Unknown=0, NotChecked=0, Total=2652 [2022-11-16 16:19:44,143 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 717 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 541 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 717 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 546 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 541 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:44,143 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [717 Valid, 133 Invalid, 546 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 541 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 16:19:44,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 680 states. [2022-11-16 16:19:44,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 680 to 568. [2022-11-16 16:19:44,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 568 states, 565 states have (on average 1.2194690265486725) internal successors, (689), 567 states have internal predecessors, (689), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:44,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 568 states to 568 states and 689 transitions. [2022-11-16 16:19:44,157 INFO L78 Accepts]: Start accepts. Automaton has 568 states and 689 transitions. Word has length 52 [2022-11-16 16:19:44,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:44,158 INFO L495 AbstractCegarLoop]: Abstraction has 568 states and 689 transitions. [2022-11-16 16:19:44,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:44,158 INFO L276 IsEmpty]: Start isEmpty. Operand 568 states and 689 transitions. [2022-11-16 16:19:44,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-16 16:19:44,159 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:44,159 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:44,167 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-11-16 16:19:44,367 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-11-16 16:19:44,367 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:44,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:44,367 INFO L85 PathProgramCache]: Analyzing trace with hash 1355851898, now seen corresponding path program 9 times [2022-11-16 16:19:44,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:44,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1528782728] [2022-11-16 16:19:44,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:44,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:44,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:44,760 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 4 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:19:44,760 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:44,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1528782728] [2022-11-16 16:19:44,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1528782728] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:44,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1491674277] [2022-11-16 16:19:44,760 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:19:44,760 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:44,760 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:44,761 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:44,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-11-16 16:19:45,023 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:19:45,024 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:19:45,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-16 16:19:45,027 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:45,344 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 9 proven. 61 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:19:45,344 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:45,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:19:45,796 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 9 proven. 61 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 16:19:45,796 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1491674277] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:45,796 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2061370168] [2022-11-16 16:19:45,798 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:19:45,798 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:45,798 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:45,798 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:45,798 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:45,820 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:45,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:45,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:19:45,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:45,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:45,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:19:46,006 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:19:46,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:19:46,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:46,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:46,120 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:46,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:47,222 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:50,276 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29359#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:50,276 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:50,276 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:50,276 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-16 16:19:50,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358251606] [2022-11-16 16:19:50,277 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:50,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-16 16:19:50,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:50,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-16 16:19:50,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1864, Unknown=0, NotChecked=0, Total=2070 [2022-11-16 16:19:50,278 INFO L87 Difference]: Start difference. First operand 568 states and 689 transitions. Second operand has 30 states, 29 states have (on average 3.7586206896551726) internal successors, (109), 29 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:51,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:19:51,487 INFO L93 Difference]: Finished difference Result 666 states and 778 transitions. [2022-11-16 16:19:51,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-16 16:19:51,487 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 3.7586206896551726) internal successors, (109), 29 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-11-16 16:19:51,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:19:51,489 INFO L225 Difference]: With dead ends: 666 [2022-11-16 16:19:51,489 INFO L226 Difference]: Without dead ends: 666 [2022-11-16 16:19:51,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 120 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1199 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=672, Invalid=3750, Unknown=0, NotChecked=0, Total=4422 [2022-11-16 16:19:51,490 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 780 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 642 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 780 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 663 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 642 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:19:51,490 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [780 Valid, 111 Invalid, 663 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 642 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-16 16:19:51,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2022-11-16 16:19:51,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 568. [2022-11-16 16:19:51,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 568 states, 565 states have (on average 1.2141592920353983) internal successors, (686), 567 states have internal predecessors, (686), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:51,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 568 states to 568 states and 686 transitions. [2022-11-16 16:19:51,499 INFO L78 Accepts]: Start accepts. Automaton has 568 states and 686 transitions. Word has length 53 [2022-11-16 16:19:51,499 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:19:51,499 INFO L495 AbstractCegarLoop]: Abstraction has 568 states and 686 transitions. [2022-11-16 16:19:51,499 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 3.7586206896551726) internal successors, (109), 29 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:19:51,499 INFO L276 IsEmpty]: Start isEmpty. Operand 568 states and 686 transitions. [2022-11-16 16:19:51,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-16 16:19:51,500 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:19:51,501 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:19:51,511 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Forceful destruction successful, exit code 0 [2022-11-16 16:19:51,706 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:51,707 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:19:51,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:19:51,707 INFO L85 PathProgramCache]: Analyzing trace with hash 1403740793, now seen corresponding path program 7 times [2022-11-16 16:19:51,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:19:51,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1721347287] [2022-11-16 16:19:51,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:19:51,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:19:51,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:53,014 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 20 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:19:53,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:19:53,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1721347287] [2022-11-16 16:19:53,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1721347287] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:19:53,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1681359615] [2022-11-16 16:19:53,015 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:19:53,015 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:19:53,015 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:19:53,016 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:19:53,018 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-16 16:19:53,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:19:53,220 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 55 conjunts are in the unsatisfiable core [2022-11-16 16:19:53,222 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:19:53,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:54,298 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-16 16:19:54,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-16 16:19:54,302 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 10 proven. 85 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:54,302 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:19:54,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:19:54,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:19:55,011 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 10 proven. 85 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:19:55,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1681359615] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:19:55,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1232883784] [2022-11-16 16:19:55,012 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:19:55,012 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:19:55,013 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:19:55,013 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:19:55,013 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:19:55,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:19:55,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:19:55,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:55,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:55,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:55,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:55,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:55,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:19:55,253 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:19:55,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:19:55,531 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:19:59,175 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31018#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:19:59,175 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:19:59,175 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:19:59,176 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 18, 18] total 49 [2022-11-16 16:19:59,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1047505177] [2022-11-16 16:19:59,176 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:19:59,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-16 16:19:59,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:19:59,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-16 16:19:59,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=3706, Unknown=0, NotChecked=0, Total=3906 [2022-11-16 16:19:59,177 INFO L87 Difference]: Start difference. First operand 568 states and 686 transitions. Second operand has 49 states, 49 states have (on average 2.693877551020408) internal successors, (132), 49 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:07,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:20:07,610 INFO L93 Difference]: Finished difference Result 1131 states and 1316 transitions. [2022-11-16 16:20:07,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 96 states. [2022-11-16 16:20:07,615 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.693877551020408) internal successors, (132), 49 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2022-11-16 16:20:07,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:20:07,619 INFO L225 Difference]: With dead ends: 1131 [2022-11-16 16:20:07,619 INFO L226 Difference]: Without dead ends: 1129 [2022-11-16 16:20:07,620 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 259 GetRequests, 121 SyntacticMatches, 9 SemanticMatches, 129 ConstructedPredicates, 0 IntricatePredicates, 7 DeprecatedPredicates, 4953 ImplicationChecksByTransitivity, 11.2s TimeCoverageRelationStatistics Valid=896, Invalid=16134, Unknown=0, NotChecked=0, Total=17030 [2022-11-16 16:20:07,621 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 827 mSDsluCounter, 1467 mSDsCounter, 0 mSdLazyCounter, 3921 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 827 SdHoareTripleChecker+Valid, 1521 SdHoareTripleChecker+Invalid, 4791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 3921 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 845 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:20:07,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [827 Valid, 1521 Invalid, 4791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 3921 Invalid, 0 Unknown, 845 Unchecked, 2.7s Time] [2022-11-16 16:20:07,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1129 states. [2022-11-16 16:20:07,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1129 to 612. [2022-11-16 16:20:07,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 612 states, 609 states have (on average 1.2167487684729064) internal successors, (741), 611 states have internal predecessors, (741), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:07,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 612 states to 612 states and 741 transitions. [2022-11-16 16:20:07,634 INFO L78 Accepts]: Start accepts. Automaton has 612 states and 741 transitions. Word has length 54 [2022-11-16 16:20:07,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:20:07,634 INFO L495 AbstractCegarLoop]: Abstraction has 612 states and 741 transitions. [2022-11-16 16:20:07,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.693877551020408) internal successors, (132), 49 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:07,635 INFO L276 IsEmpty]: Start isEmpty. Operand 612 states and 741 transitions. [2022-11-16 16:20:07,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-16 16:20:07,636 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:20:07,636 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:20:07,647 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-16 16:20:07,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:07,843 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:20:07,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:20:07,843 INFO L85 PathProgramCache]: Analyzing trace with hash 1154445308, now seen corresponding path program 10 times [2022-11-16 16:20:07,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:20:07,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476262732] [2022-11-16 16:20:07,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:20:07,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:20:07,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:08,350 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 4 proven. 76 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:20:08,350 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:20:08,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [476262732] [2022-11-16 16:20:08,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [476262732] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:20:08,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2124924880] [2022-11-16 16:20:08,351 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:20:08,351 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:08,351 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:20:08,352 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:20:08,361 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-11-16 16:20:08,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:08,551 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-16 16:20:08,552 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:20:08,933 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:20:08,933 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:20:09,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:20:09,516 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:20:09,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2124924880] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:20:09,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1205731014] [2022-11-16 16:20:09,518 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:20:09,518 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:20:09,518 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:20:09,518 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:20:09,518 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:20:09,547 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:20:09,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:20:09,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:09,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:09,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:09,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:20:09,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:09,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:09,797 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:20:09,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:20:11,085 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:20:14,887 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33272#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:20:14,887 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:20:14,888 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:20:14,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-11-16 16:20:14,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706005851] [2022-11-16 16:20:14,888 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:20:14,888 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-16 16:20:14,888 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:20:14,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-16 16:20:14,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1862, Unknown=0, NotChecked=0, Total=2070 [2022-11-16 16:20:14,889 INFO L87 Difference]: Start difference. First operand 612 states and 741 transitions. Second operand has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:16,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:20:16,410 INFO L93 Difference]: Finished difference Result 698 states and 815 transitions. [2022-11-16 16:20:16,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-16 16:20:16,411 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-11-16 16:20:16,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:20:16,412 INFO L225 Difference]: With dead ends: 698 [2022-11-16 16:20:16,412 INFO L226 Difference]: Without dead ends: 698 [2022-11-16 16:20:16,413 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 126 SyntacticMatches, 5 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1132 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=615, Invalid=3545, Unknown=0, NotChecked=0, Total=4160 [2022-11-16 16:20:16,414 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 765 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 715 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 765 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 731 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 715 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:20:16,414 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [765 Valid, 115 Invalid, 731 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 715 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:20:16,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 698 states. [2022-11-16 16:20:16,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 698 to 612. [2022-11-16 16:20:16,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 612 states, 609 states have (on average 1.2101806239737274) internal successors, (737), 611 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:16,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 612 states to 612 states and 737 transitions. [2022-11-16 16:20:16,425 INFO L78 Accepts]: Start accepts. Automaton has 612 states and 737 transitions. Word has length 55 [2022-11-16 16:20:16,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:20:16,426 INFO L495 AbstractCegarLoop]: Abstraction has 612 states and 737 transitions. [2022-11-16 16:20:16,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:16,426 INFO L276 IsEmpty]: Start isEmpty. Operand 612 states and 737 transitions. [2022-11-16 16:20:16,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-16 16:20:16,428 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:20:16,428 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 4, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:20:16,441 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-11-16 16:20:16,635 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:16,636 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:20:16,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:20:16,636 INFO L85 PathProgramCache]: Analyzing trace with hash 1480663095, now seen corresponding path program 11 times [2022-11-16 16:20:16,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:20:16,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1089482] [2022-11-16 16:20:16,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:20:16,636 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:20:16,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:18,034 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:20:18,035 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:20:18,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1089482] [2022-11-16 16:20:18,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1089482] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:20:18,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1118581517] [2022-11-16 16:20:18,035 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:20:18,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:18,036 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:20:18,042 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:20:18,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-11-16 16:20:18,578 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-16 16:20:18,578 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:20:18,582 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-16 16:20:18,585 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:20:19,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-16 16:20:19,786 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:20:19,788 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:20:19,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 31 treesize of output 20 [2022-11-16 16:20:19,791 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 10 proven. 78 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:20:19,791 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:20:20,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:20:20,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:20:20,536 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 10 proven. 76 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-16 16:20:20,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1118581517] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:20:20,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [906300612] [2022-11-16 16:20:20,537 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:20:20,538 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:20:20,538 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:20:20,538 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:20:20,538 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:20:20,568 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:20:20,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:20:20,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:20:20,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:20,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:20,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:20,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:20:20,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:20,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:20,863 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:20:20,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:20:21,465 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:20:25,900 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35018#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:20:25,900 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:20:25,900 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:20:25,900 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 17, 16] total 52 [2022-11-16 16:20:25,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1066441528] [2022-11-16 16:20:25,900 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:20:25,900 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-16 16:20:25,901 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:20:25,901 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-16 16:20:25,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=243, Invalid=4313, Unknown=0, NotChecked=0, Total=4556 [2022-11-16 16:20:25,901 INFO L87 Difference]: Start difference. First operand 612 states and 737 transitions. Second operand has 52 states, 52 states have (on average 2.769230769230769) internal successors, (144), 52 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:35,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:20:35,451 INFO L93 Difference]: Finished difference Result 1213 states and 1405 transitions. [2022-11-16 16:20:35,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 116 states. [2022-11-16 16:20:35,451 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 2.769230769230769) internal successors, (144), 52 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-11-16 16:20:35,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:20:35,455 INFO L225 Difference]: With dead ends: 1213 [2022-11-16 16:20:35,455 INFO L226 Difference]: Without dead ends: 1205 [2022-11-16 16:20:35,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 160 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6890 ImplicationChecksByTransitivity, 13.6s TimeCoverageRelationStatistics Valid=1486, Invalid=24596, Unknown=0, NotChecked=0, Total=26082 [2022-11-16 16:20:35,457 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 1084 mSDsluCounter, 1516 mSDsCounter, 0 mSdLazyCounter, 3696 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1084 SdHoareTripleChecker+Valid, 1569 SdHoareTripleChecker+Invalid, 4759 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 3696 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1025 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:20:35,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1084 Valid, 1569 Invalid, 4759 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 3696 Invalid, 0 Unknown, 1025 Unchecked, 2.2s Time] [2022-11-16 16:20:35,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1205 states. [2022-11-16 16:20:35,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1205 to 764. [2022-11-16 16:20:35,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 764 states, 761 states have (on average 1.202365308804205) internal successors, (915), 763 states have internal predecessors, (915), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:35,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 764 states to 764 states and 915 transitions. [2022-11-16 16:20:35,470 INFO L78 Accepts]: Start accepts. Automaton has 764 states and 915 transitions. Word has length 56 [2022-11-16 16:20:35,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:20:35,470 INFO L495 AbstractCegarLoop]: Abstraction has 764 states and 915 transitions. [2022-11-16 16:20:35,471 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 2.769230769230769) internal successors, (144), 52 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:35,471 INFO L276 IsEmpty]: Start isEmpty. Operand 764 states and 915 transitions. [2022-11-16 16:20:35,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-16 16:20:35,472 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:20:35,472 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:20:35,487 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-11-16 16:20:35,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-11-16 16:20:35,679 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:20:35,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:20:35,679 INFO L85 PathProgramCache]: Analyzing trace with hash 248945825, now seen corresponding path program 8 times [2022-11-16 16:20:35,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:20:35,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [469691051] [2022-11-16 16:20:35,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:20:35,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:20:35,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:36,167 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 9 proven. 86 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-16 16:20:36,167 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:20:36,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [469691051] [2022-11-16 16:20:36,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [469691051] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:20:36,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1144676487] [2022-11-16 16:20:36,167 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:20:36,167 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:36,167 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:20:36,169 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:20:36,199 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-16 16:20:36,630 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-16 16:20:36,631 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:20:36,633 INFO L263 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-16 16:20:36,635 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:20:37,018 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 16 proven. 79 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-16 16:20:37,019 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:20:37,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-16 16:20:37,546 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 16 proven. 79 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-16 16:20:37,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1144676487] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:20:37,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1455902497] [2022-11-16 16:20:37,548 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:20:37,548 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:20:37,548 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:20:37,548 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:20:37,548 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:20:37,571 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:20:37,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:20:37,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:20:37,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:37,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:37,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:20:37,745 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:20:37,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:20:37,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:37,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:37,860 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:20:37,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:20:38,133 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:20:41,056 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37582#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:20:41,056 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:20:41,057 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:20:41,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 38 [2022-11-16 16:20:41,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1382430741] [2022-11-16 16:20:41,057 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:20:41,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-11-16 16:20:41,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:20:41,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-11-16 16:20:41,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=292, Invalid=2570, Unknown=0, NotChecked=0, Total=2862 [2022-11-16 16:20:41,059 INFO L87 Difference]: Start difference. First operand 764 states and 915 transitions. Second operand has 40 states, 39 states have (on average 3.3076923076923075) internal successors, (129), 39 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:42,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:20:42,209 INFO L93 Difference]: Finished difference Result 1390 states and 1650 transitions. [2022-11-16 16:20:42,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-16 16:20:42,209 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 39 states have (on average 3.3076923076923075) internal successors, (129), 39 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-11-16 16:20:42,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:20:42,213 INFO L225 Difference]: With dead ends: 1390 [2022-11-16 16:20:42,213 INFO L226 Difference]: Without dead ends: 1390 [2022-11-16 16:20:42,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 128 SyntacticMatches, 6 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1526 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=790, Invalid=4322, Unknown=0, NotChecked=0, Total=5112 [2022-11-16 16:20:42,214 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 445 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 911 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 445 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 928 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 911 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-16 16:20:42,214 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [445 Valid, 199 Invalid, 928 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 911 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-16 16:20:42,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1390 states. [2022-11-16 16:20:42,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1390 to 767. [2022-11-16 16:20:42,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 767 states, 764 states have (on average 1.2015706806282722) internal successors, (918), 766 states have internal predecessors, (918), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:42,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 767 states to 767 states and 918 transitions. [2022-11-16 16:20:42,223 INFO L78 Accepts]: Start accepts. Automaton has 767 states and 918 transitions. Word has length 58 [2022-11-16 16:20:42,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:20:42,224 INFO L495 AbstractCegarLoop]: Abstraction has 767 states and 918 transitions. [2022-11-16 16:20:42,224 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 39 states have (on average 3.3076923076923075) internal successors, (129), 39 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:42,224 INFO L276 IsEmpty]: Start isEmpty. Operand 767 states and 918 transitions. [2022-11-16 16:20:42,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 16:20:42,225 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:20:42,226 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:20:42,235 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-16 16:20:42,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-11-16 16:20:42,432 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:20:42,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:20:42,433 INFO L85 PathProgramCache]: Analyzing trace with hash 122835659, now seen corresponding path program 12 times [2022-11-16 16:20:42,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:20:42,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1932185297] [2022-11-16 16:20:42,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:20:42,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:20:42,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:43,208 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 20 proven. 74 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:20:43,209 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:20:43,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1932185297] [2022-11-16 16:20:43,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1932185297] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:20:43,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1519445640] [2022-11-16 16:20:43,209 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:20:43,209 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:43,209 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:20:43,210 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:20:43,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-11-16 16:20:43,455 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:20:43,455 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:20:43,458 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 70 conjunts are in the unsatisfiable core [2022-11-16 16:20:43,466 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:20:43,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:20:43,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:43,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:20:44,154 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-16 16:20:44,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-16 16:20:44,158 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 20 proven. 74 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:20:44,158 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:20:44,307 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1634 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1634) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-16 16:20:44,313 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:20:44,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-16 16:20:44,320 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:20:44,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-16 16:20:44,559 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 20 proven. 74 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:20:44,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1519445640] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:20:44,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [19413294] [2022-11-16 16:20:44,560 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:20:44,560 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:20:44,560 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:20:44,560 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:20:44,560 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:20:44,589 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:20:44,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:20:44,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:20:44,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:44,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:44,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:44,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:20:44,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:44,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:44,870 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:20:44,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:20:45,325 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:20:49,148 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40179#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:20:49,148 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:20:49,148 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:20:49,148 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 19] total 35 [2022-11-16 16:20:49,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2118673953] [2022-11-16 16:20:49,149 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:20:49,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-16 16:20:49,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:20:49,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-16 16:20:49,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=192, Invalid=2361, Unknown=1, NotChecked=98, Total=2652 [2022-11-16 16:20:49,150 INFO L87 Difference]: Start difference. First operand 767 states and 918 transitions. Second operand has 36 states, 36 states have (on average 2.6666666666666665) internal successors, (96), 35 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:50,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:20:50,158 INFO L93 Difference]: Finished difference Result 1071 states and 1248 transitions. [2022-11-16 16:20:50,159 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-16 16:20:50,159 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.6666666666666665) internal successors, (96), 35 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2022-11-16 16:20:50,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:20:50,163 INFO L225 Difference]: With dead ends: 1071 [2022-11-16 16:20:50,163 INFO L226 Difference]: Without dead ends: 1071 [2022-11-16 16:20:50,163 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 209 GetRequests, 143 SyntacticMatches, 4 SemanticMatches, 62 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 872 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=278, Invalid=3631, Unknown=1, NotChecked=122, Total=4032 [2022-11-16 16:20:50,163 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 58 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 877 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 877 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 184 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:20:50,163 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 286 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 877 Invalid, 0 Unknown, 184 Unchecked, 0.5s Time] [2022-11-16 16:20:50,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1071 states. [2022-11-16 16:20:50,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1071 to 891. [2022-11-16 16:20:50,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 891 states, 888 states have (on average 1.1936936936936937) internal successors, (1060), 890 states have internal predecessors, (1060), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:50,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 891 states to 891 states and 1060 transitions. [2022-11-16 16:20:50,172 INFO L78 Accepts]: Start accepts. Automaton has 891 states and 1060 transitions. Word has length 60 [2022-11-16 16:20:50,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:20:50,173 INFO L495 AbstractCegarLoop]: Abstraction has 891 states and 1060 transitions. [2022-11-16 16:20:50,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.6666666666666665) internal successors, (96), 35 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:50,173 INFO L276 IsEmpty]: Start isEmpty. Operand 891 states and 1060 transitions. [2022-11-16 16:20:50,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 16:20:50,174 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:20:50,175 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:20:50,181 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Forceful destruction successful, exit code 0 [2022-11-16 16:20:50,381 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable55,39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:50,381 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:20:50,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:20:50,381 INFO L85 PathProgramCache]: Analyzing trace with hash -175738785, now seen corresponding path program 13 times [2022-11-16 16:20:50,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:20:50,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637851403] [2022-11-16 16:20:50,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:20:50,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:20:50,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:50,807 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 9 proven. 88 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:20:50,807 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:20:50,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637851403] [2022-11-16 16:20:50,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637851403] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:20:50,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [959148327] [2022-11-16 16:20:50,807 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:20:50,808 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:50,808 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:20:50,809 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:20:50,811 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-11-16 16:20:51,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:51,015 INFO L263 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-16 16:20:51,016 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:20:51,324 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 16 proven. 81 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:20:51,324 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:20:51,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:20:51,831 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 16 proven. 81 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:20:51,831 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [959148327] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:20:51,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1494918068] [2022-11-16 16:20:51,832 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:20:51,832 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:20:51,832 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:20:51,833 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:20:51,833 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:20:51,857 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:20:51,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:20:51,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:51,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:51,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:51,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:20:52,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:52,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:20:52,078 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:20:52,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:20:53,182 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:20:56,132 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '42569#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:20:56,132 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:20:56,132 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:20:56,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 32 [2022-11-16 16:20:56,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1373545130] [2022-11-16 16:20:56,133 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:20:56,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-16 16:20:56,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:20:56,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-16 16:20:56,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=231, Invalid=2219, Unknown=0, NotChecked=0, Total=2450 [2022-11-16 16:20:56,133 INFO L87 Difference]: Start difference. First operand 891 states and 1060 transitions. Second operand has 34 states, 33 states have (on average 3.484848484848485) internal successors, (115), 33 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:57,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:20:57,793 INFO L93 Difference]: Finished difference Result 1397 states and 1637 transitions. [2022-11-16 16:20:57,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-16 16:20:57,794 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 3.484848484848485) internal successors, (115), 33 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2022-11-16 16:20:57,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:20:57,796 INFO L225 Difference]: With dead ends: 1397 [2022-11-16 16:20:57,796 INFO L226 Difference]: Without dead ends: 1397 [2022-11-16 16:20:57,797 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 218 GetRequests, 138 SyntacticMatches, 6 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1553 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=912, Invalid=4788, Unknown=0, NotChecked=0, Total=5700 [2022-11-16 16:20:57,797 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 445 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 986 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 445 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 1015 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 986 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:20:57,797 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [445 Valid, 213 Invalid, 1015 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 986 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:20:57,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1397 states. [2022-11-16 16:20:57,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1397 to 894. [2022-11-16 16:20:57,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 894 states, 891 states have (on average 1.1919191919191918) internal successors, (1062), 893 states have internal predecessors, (1062), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:57,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 894 states to 894 states and 1062 transitions. [2022-11-16 16:20:57,822 INFO L78 Accepts]: Start accepts. Automaton has 894 states and 1062 transitions. Word has length 60 [2022-11-16 16:20:57,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:20:57,823 INFO L495 AbstractCegarLoop]: Abstraction has 894 states and 1062 transitions. [2022-11-16 16:20:57,823 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 3.484848484848485) internal successors, (115), 33 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:20:57,823 INFO L276 IsEmpty]: Start isEmpty. Operand 894 states and 1062 transitions. [2022-11-16 16:20:57,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 16:20:57,825 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:20:57,825 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:20:57,831 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-11-16 16:20:58,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable56 [2022-11-16 16:20:58,031 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:20:58,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:20:58,031 INFO L85 PathProgramCache]: Analyzing trace with hash -1281192173, now seen corresponding path program 8 times [2022-11-16 16:20:58,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:20:58,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874231590] [2022-11-16 16:20:58,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:20:58,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:20:58,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:20:58,512 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 16 proven. 101 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:20:58,512 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:20:58,512 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874231590] [2022-11-16 16:20:58,512 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874231590] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:20:58,512 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1417519255] [2022-11-16 16:20:58,513 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:20:58,513 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:20:58,513 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:20:58,514 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:20:58,519 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-16 16:20:58,882 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-16 16:20:58,882 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:20:58,885 INFO L263 TraceCheckSpWp]: Trace formula consists of 429 conjuncts, 63 conjunts are in the unsatisfiable core [2022-11-16 16:20:58,886 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:20:59,605 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 30 proven. 112 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:20:59,606 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:21:00,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:21:00,426 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 25 proven. 92 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:21:00,427 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1417519255] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:21:00,427 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2121132054] [2022-11-16 16:21:00,428 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:21:00,428 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:21:00,428 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:21:00,428 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:21:00,428 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:21:00,449 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:21:00,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:21:00,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:21:00,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:00,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:00,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:21:00,634 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:21:00,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:21:00,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:00,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:00,734 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:21:00,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:21:00,999 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:21:04,257 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '45337#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:21:04,257 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:21:04,257 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:21:04,257 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 25, 19] total 54 [2022-11-16 16:21:04,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204735215] [2022-11-16 16:21:04,258 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:21:04,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-16 16:21:04,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:21:04,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-16 16:21:04,258 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=416, Invalid=4276, Unknown=0, NotChecked=0, Total=4692 [2022-11-16 16:21:04,258 INFO L87 Difference]: Start difference. First operand 894 states and 1062 transitions. Second operand has 55 states, 54 states have (on average 2.8703703703703702) internal successors, (155), 55 states have internal predecessors, (155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:11,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:21:11,144 INFO L93 Difference]: Finished difference Result 2959 states and 3452 transitions. [2022-11-16 16:21:11,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2022-11-16 16:21:11,145 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 54 states have (on average 2.8703703703703702) internal successors, (155), 55 states have internal predecessors, (155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2022-11-16 16:21:11,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:21:11,152 INFO L225 Difference]: With dead ends: 2959 [2022-11-16 16:21:11,152 INFO L226 Difference]: Without dead ends: 2959 [2022-11-16 16:21:11,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 127 SyntacticMatches, 0 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5343 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=2720, Invalid=17586, Unknown=0, NotChecked=0, Total=20306 [2022-11-16 16:21:11,153 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 2309 mSDsluCounter, 1530 mSDsCounter, 0 mSdLazyCounter, 5231 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2309 SdHoareTripleChecker+Valid, 1641 SdHoareTripleChecker+Invalid, 5298 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 5231 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:21:11,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2309 Valid, 1641 Invalid, 5298 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 5231 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-11-16 16:21:11,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2959 states. [2022-11-16 16:21:11,166 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2959 to 1133. [2022-11-16 16:21:11,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1133 states, 1130 states have (on average 1.2053097345132744) internal successors, (1362), 1132 states have internal predecessors, (1362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:11,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1133 states to 1133 states and 1362 transitions. [2022-11-16 16:21:11,168 INFO L78 Accepts]: Start accepts. Automaton has 1133 states and 1362 transitions. Word has length 60 [2022-11-16 16:21:11,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:21:11,168 INFO L495 AbstractCegarLoop]: Abstraction has 1133 states and 1362 transitions. [2022-11-16 16:21:11,168 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 54 states have (on average 2.8703703703703702) internal successors, (155), 55 states have internal predecessors, (155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:11,168 INFO L276 IsEmpty]: Start isEmpty. Operand 1133 states and 1362 transitions. [2022-11-16 16:21:11,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-16 16:21:11,169 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:21:11,170 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:21:11,183 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-16 16:21:11,376 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable57,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:21:11,376 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:21:11,377 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:21:11,377 INFO L85 PathProgramCache]: Analyzing trace with hash 2001612215, now seen corresponding path program 8 times [2022-11-16 16:21:11,377 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:21:11,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1083426441] [2022-11-16 16:21:11,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:21:11,377 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:21:11,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:21:12,410 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 33 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:21:12,410 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:21:12,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1083426441] [2022-11-16 16:21:12,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1083426441] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:21:12,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1197173302] [2022-11-16 16:21:12,411 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:21:12,411 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:21:12,411 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:21:12,412 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:21:12,413 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-11-16 16:21:12,878 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-16 16:21:12,878 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:21:12,881 INFO L263 TraceCheckSpWp]: Trace formula consists of 396 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-16 16:21:12,883 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:21:12,904 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-16 16:21:12,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-16 16:21:13,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:13,515 INFO L321 Elim1Store]: treesize reduction 37, result has 19.6 percent of original size [2022-11-16 16:21:13,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 27 treesize of output 26 [2022-11-16 16:21:15,217 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:21:15,225 INFO L321 Elim1Store]: treesize reduction 37, result has 7.5 percent of original size [2022-11-16 16:21:15,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 30 treesize of output 13 [2022-11-16 16:21:15,296 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 33 proven. 79 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:21:15,296 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:21:16,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-16 16:21:17,940 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 1 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:21:17,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1197173302] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:21:17,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [286423750] [2022-11-16 16:21:17,941 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:21:17,941 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:21:17,941 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:21:17,942 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:21:17,942 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:21:17,968 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:21:17,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:21:18,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:18,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:18,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:18,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:18,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:18,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:18,200 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:21:18,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:21:18,586 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:21:23,708 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '50004#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:21:23,708 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:21:23,708 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:21:23,708 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 18] total 52 [2022-11-16 16:21:23,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1576826401] [2022-11-16 16:21:23,709 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:21:23,709 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-16 16:21:23,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:21:23,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-16 16:21:23,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=4439, Unknown=0, NotChecked=0, Total=4692 [2022-11-16 16:21:23,710 INFO L87 Difference]: Start difference. First operand 1133 states and 1362 transitions. Second operand has 53 states, 53 states have (on average 3.30188679245283) internal successors, (175), 52 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:24,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:21:24,920 INFO L93 Difference]: Finished difference Result 1460 states and 1733 transitions. [2022-11-16 16:21:24,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-16 16:21:24,921 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 3.30188679245283) internal successors, (175), 52 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-11-16 16:21:24,921 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:21:24,925 INFO L225 Difference]: With dead ends: 1460 [2022-11-16 16:21:24,925 INFO L226 Difference]: Without dead ends: 1338 [2022-11-16 16:21:24,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 134 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1211 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=349, Invalid=5971, Unknown=0, NotChecked=0, Total=6320 [2022-11-16 16:21:24,926 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 54 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 438 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 647 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 438 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 205 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:21:24,926 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 406 Invalid, 647 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 438 Invalid, 0 Unknown, 205 Unchecked, 0.3s Time] [2022-11-16 16:21:24,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1338 states. [2022-11-16 16:21:24,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1338 to 1293. [2022-11-16 16:21:24,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1293 states, 1290 states have (on average 1.1883720930232557) internal successors, (1533), 1292 states have internal predecessors, (1533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:24,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1293 states to 1293 states and 1533 transitions. [2022-11-16 16:21:24,938 INFO L78 Accepts]: Start accepts. Automaton has 1293 states and 1533 transitions. Word has length 61 [2022-11-16 16:21:24,939 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:21:24,939 INFO L495 AbstractCegarLoop]: Abstraction has 1293 states and 1533 transitions. [2022-11-16 16:21:24,939 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 53 states have (on average 3.30188679245283) internal successors, (175), 52 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:24,939 INFO L276 IsEmpty]: Start isEmpty. Operand 1293 states and 1533 transitions. [2022-11-16 16:21:24,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-16 16:21:24,941 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:21:24,941 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 5, 4, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:21:24,951 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-11-16 16:21:25,147 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-11-16 16:21:25,147 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:21:25,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:21:25,147 INFO L85 PathProgramCache]: Analyzing trace with hash -822988328, now seen corresponding path program 14 times [2022-11-16 16:21:25,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:21:25,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106397726] [2022-11-16 16:21:25,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:21:25,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:21:25,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:21:26,062 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 24 proven. 88 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-16 16:21:26,062 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:21:26,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106397726] [2022-11-16 16:21:26,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106397726] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:21:26,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1007217976] [2022-11-16 16:21:26,063 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:21:26,063 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:21:26,063 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:21:26,067 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:21:26,098 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-11-16 16:21:26,387 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-16 16:21:26,388 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:21:26,390 INFO L263 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 49 conjunts are in the unsatisfiable core [2022-11-16 16:21:26,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:21:26,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:27,222 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-16 16:21:27,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-11-16 16:21:27,225 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 12 proven. 98 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-16 16:21:27,225 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:21:27,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-16 16:21:27,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:21:27,878 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 12 proven. 98 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-16 16:21:27,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1007217976] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:21:27,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1868519617] [2022-11-16 16:21:27,880 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:21:27,880 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:21:27,880 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:21:27,880 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:21:27,880 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:21:27,903 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:21:27,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:21:27,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:27,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:28,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:28,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:28,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:28,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:28,166 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:21:28,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:21:29,435 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:21:33,833 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '53197#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:21:33,833 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:21:33,833 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:21:33,834 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 16] total 41 [2022-11-16 16:21:33,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [803974878] [2022-11-16 16:21:33,834 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:21:33,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-11-16 16:21:33,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:21:33,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-11-16 16:21:33,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=191, Invalid=3001, Unknown=0, NotChecked=0, Total=3192 [2022-11-16 16:21:33,835 INFO L87 Difference]: Start difference. First operand 1293 states and 1533 transitions. Second operand has 41 states, 41 states have (on average 3.292682926829268) internal successors, (135), 41 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:40,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:21:40,257 INFO L93 Difference]: Finished difference Result 1413 states and 1624 transitions. [2022-11-16 16:21:40,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 89 states. [2022-11-16 16:21:40,257 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 3.292682926829268) internal successors, (135), 41 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-11-16 16:21:40,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:21:40,260 INFO L225 Difference]: With dead ends: 1413 [2022-11-16 16:21:40,260 INFO L226 Difference]: Without dead ends: 1402 [2022-11-16 16:21:40,261 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 270 GetRequests, 143 SyntacticMatches, 3 SemanticMatches, 124 ConstructedPredicates, 0 IntricatePredicates, 6 DeprecatedPredicates, 4418 ImplicationChecksByTransitivity, 9.9s TimeCoverageRelationStatistics Valid=863, Invalid=14887, Unknown=0, NotChecked=0, Total=15750 [2022-11-16 16:21:40,261 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 441 mSDsluCounter, 1266 mSDsCounter, 0 mSdLazyCounter, 3021 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 441 SdHoareTripleChecker+Valid, 1322 SdHoareTripleChecker+Invalid, 4202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 3021 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1164 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:21:40,261 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [441 Valid, 1322 Invalid, 4202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 3021 Invalid, 0 Unknown, 1164 Unchecked, 2.1s Time] [2022-11-16 16:21:40,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1402 states. [2022-11-16 16:21:40,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1402 to 1115. [2022-11-16 16:21:40,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1115 states, 1112 states have (on average 1.1798561151079137) internal successors, (1312), 1114 states have internal predecessors, (1312), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:40,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1115 states to 1115 states and 1312 transitions. [2022-11-16 16:21:40,284 INFO L78 Accepts]: Start accepts. Automaton has 1115 states and 1312 transitions. Word has length 61 [2022-11-16 16:21:40,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:21:40,284 INFO L495 AbstractCegarLoop]: Abstraction has 1115 states and 1312 transitions. [2022-11-16 16:21:40,284 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 3.292682926829268) internal successors, (135), 41 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:21:40,284 INFO L276 IsEmpty]: Start isEmpty. Operand 1115 states and 1312 transitions. [2022-11-16 16:21:40,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-16 16:21:40,285 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:21:40,286 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:21:40,295 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Forceful destruction successful, exit code 0 [2022-11-16 16:21:40,491 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-11-16 16:21:40,491 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:21:40,491 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:21:40,491 INFO L85 PathProgramCache]: Analyzing trace with hash 1524734217, now seen corresponding path program 15 times [2022-11-16 16:21:40,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:21:40,492 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1996914125] [2022-11-16 16:21:40,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:21:40,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:21:40,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:21:42,490 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 93 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:21:42,490 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:21:42,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1996914125] [2022-11-16 16:21:42,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1996914125] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:21:42,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1029382912] [2022-11-16 16:21:42,490 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:21:42,490 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:21:42,490 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:21:42,492 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:21:42,493 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-16 16:21:42,780 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:21:42,780 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:21:42,784 INFO L263 TraceCheckSpWp]: Trace formula consists of 415 conjuncts, 70 conjunts are in the unsatisfiable core [2022-11-16 16:21:42,789 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:21:42,807 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-11-16 16:21:42,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-11-16 16:21:43,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:21:43,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:43,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:21:44,853 INFO L321 Elim1Store]: treesize reduction 3, result has 92.7 percent of original size [2022-11-16 16:21:44,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 58 [2022-11-16 16:21:45,100 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 9 proven. 100 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:21:45,100 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:21:47,045 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:21:47,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-11-16 16:21:47,074 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:21:47,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 120 [2022-11-16 16:21:47,091 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:21:47,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-11-16 16:21:47,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-16 16:21:48,048 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 14 proven. 95 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:21:48,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1029382912] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:21:48,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1457660052] [2022-11-16 16:21:48,049 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:21:48,049 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:21:48,050 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:21:48,050 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:21:48,050 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:21:48,074 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:21:48,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:21:48,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:48,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:48,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:48,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:48,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:48,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:21:48,307 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:21:48,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:21:49,421 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:21:54,097 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '56309#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:21:54,097 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:21:54,097 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:21:54,097 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 19, 19] total 62 [2022-11-16 16:21:54,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475933955] [2022-11-16 16:21:54,098 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:21:54,098 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-11-16 16:21:54,098 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:21:54,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-11-16 16:21:54,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=309, Invalid=5842, Unknown=11, NotChecked=0, Total=6162 [2022-11-16 16:21:54,099 INFO L87 Difference]: Start difference. First operand 1115 states and 1312 transitions. Second operand has 63 states, 63 states have (on average 2.888888888888889) internal successors, (182), 62 states have internal predecessors, (182), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:01,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:22:01,491 INFO L93 Difference]: Finished difference Result 1872 states and 2122 transitions. [2022-11-16 16:22:01,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-16 16:22:01,492 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 63 states have (on average 2.888888888888889) internal successors, (182), 62 states have internal predecessors, (182), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2022-11-16 16:22:01,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:22:01,497 INFO L225 Difference]: With dead ends: 1872 [2022-11-16 16:22:01,497 INFO L226 Difference]: Without dead ends: 1840 [2022-11-16 16:22:01,498 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 270 GetRequests, 143 SyntacticMatches, 2 SemanticMatches, 125 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3429 ImplicationChecksByTransitivity, 15.5s TimeCoverageRelationStatistics Valid=912, Invalid=15079, Unknown=11, NotChecked=0, Total=16002 [2022-11-16 16:22:01,499 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 132 mSDsluCounter, 669 mSDsCounter, 0 mSdLazyCounter, 914 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 695 SdHoareTripleChecker+Invalid, 2377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 914 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1442 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-16 16:22:01,499 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 695 Invalid, 2377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 914 Invalid, 0 Unknown, 1442 Unchecked, 0.8s Time] [2022-11-16 16:22:01,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1840 states. [2022-11-16 16:22:01,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1840 to 1372. [2022-11-16 16:22:01,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1372 states, 1369 states have (on average 1.162892622352082) internal successors, (1592), 1371 states have internal predecessors, (1592), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:01,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1372 states to 1372 states and 1592 transitions. [2022-11-16 16:22:01,513 INFO L78 Accepts]: Start accepts. Automaton has 1372 states and 1592 transitions. Word has length 62 [2022-11-16 16:22:01,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:22:01,513 INFO L495 AbstractCegarLoop]: Abstraction has 1372 states and 1592 transitions. [2022-11-16 16:22:01,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 63 states have (on average 2.888888888888889) internal successors, (182), 62 states have internal predecessors, (182), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:01,513 INFO L276 IsEmpty]: Start isEmpty. Operand 1372 states and 1592 transitions. [2022-11-16 16:22:01,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-16 16:22:01,514 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:22:01,514 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:22:01,523 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-16 16:22:01,714 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:01,714 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:22:01,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:22:01,715 INFO L85 PathProgramCache]: Analyzing trace with hash -716225339, now seen corresponding path program 16 times [2022-11-16 16:22:01,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:22:01,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2110347196] [2022-11-16 16:22:01,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:22:01,715 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:22:01,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:22:02,130 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 9 proven. 94 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:22:02,131 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:22:02,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2110347196] [2022-11-16 16:22:02,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2110347196] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:22:02,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1485696053] [2022-11-16 16:22:02,131 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:22:02,131 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:02,131 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:22:02,132 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:22:02,135 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-11-16 16:22:02,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:22:02,361 INFO L263 TraceCheckSpWp]: Trace formula consists of 423 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-16 16:22:02,362 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:22:02,699 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 16 proven. 87 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:22:02,699 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:22:03,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:22:03,255 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 16 proven. 87 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 16:22:03,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1485696053] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:22:03,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1260081310] [2022-11-16 16:22:03,257 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:22:03,257 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:22:03,257 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:22:03,257 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:22:03,258 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:22:03,285 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:22:03,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:22:03,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:22:03,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:03,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:03,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:03,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:22:03,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:03,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:03,591 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:22:03,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:22:04,068 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:22:07,701 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '60079#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:22:07,702 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:22:07,702 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:22:07,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 32 [2022-11-16 16:22:07,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [883998051] [2022-11-16 16:22:07,702 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:22:07,703 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-16 16:22:07,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:22:07,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-16 16:22:07,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=230, Invalid=2220, Unknown=0, NotChecked=0, Total=2450 [2022-11-16 16:22:07,704 INFO L87 Difference]: Start difference. First operand 1372 states and 1592 transitions. Second operand has 34 states, 33 states have (on average 3.727272727272727) internal successors, (123), 33 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:09,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:22:09,516 INFO L93 Difference]: Finished difference Result 1516 states and 1725 transitions. [2022-11-16 16:22:09,516 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-16 16:22:09,516 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 3.727272727272727) internal successors, (123), 33 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2022-11-16 16:22:09,516 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:22:09,520 INFO L225 Difference]: With dead ends: 1516 [2022-11-16 16:22:09,520 INFO L226 Difference]: Without dead ends: 1516 [2022-11-16 16:22:09,520 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 225 GetRequests, 144 SyntacticMatches, 6 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1594 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=920, Invalid=4932, Unknown=0, NotChecked=0, Total=5852 [2022-11-16 16:22:09,521 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 729 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 1009 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 729 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 1043 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 1009 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:22:09,521 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [729 Valid, 211 Invalid, 1043 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 1009 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:22:09,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1516 states. [2022-11-16 16:22:09,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1516 to 1372. [2022-11-16 16:22:09,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1372 states, 1369 states have (on average 1.1607012417823228) internal successors, (1589), 1371 states have internal predecessors, (1589), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:09,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1372 states to 1372 states and 1589 transitions. [2022-11-16 16:22:09,535 INFO L78 Accepts]: Start accepts. Automaton has 1372 states and 1589 transitions. Word has length 62 [2022-11-16 16:22:09,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:22:09,535 INFO L495 AbstractCegarLoop]: Abstraction has 1372 states and 1589 transitions. [2022-11-16 16:22:09,535 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 3.727272727272727) internal successors, (123), 33 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:09,535 INFO L276 IsEmpty]: Start isEmpty. Operand 1372 states and 1589 transitions. [2022-11-16 16:22:09,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-16 16:22:09,537 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:22:09,537 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:22:09,545 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Forceful destruction successful, exit code 0 [2022-11-16 16:22:09,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:09,743 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:22:09,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:22:09,744 INFO L85 PathProgramCache]: Analyzing trace with hash 1760525053, now seen corresponding path program 9 times [2022-11-16 16:22:09,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:22:09,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027994708] [2022-11-16 16:22:09,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:22:09,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:22:09,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:22:10,246 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 9 proven. 111 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:22:10,247 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:22:10,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027994708] [2022-11-16 16:22:10,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027994708] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:22:10,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1367005253] [2022-11-16 16:22:10,247 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:22:10,247 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:10,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:22:10,249 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:22:10,275 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-11-16 16:22:10,568 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:22:10,568 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:22:10,572 INFO L263 TraceCheckSpWp]: Trace formula consists of 409 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-16 16:22:10,574 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:22:11,013 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 16 proven. 104 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:22:11,013 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:22:11,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:22:11,566 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 16 proven. 104 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:22:11,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1367005253] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:22:11,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1684359003] [2022-11-16 16:22:11,567 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:22:11,567 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:22:11,567 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:22:11,567 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:22:11,567 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:22:11,592 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:22:11,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:22:11,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:22:11,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:11,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:11,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:11,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:22:11,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:11,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:11,911 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:22:11,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:22:12,126 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:22:16,377 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '63441#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:22:16,377 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:22:16,377 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:22:16,378 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 14, 14] total 30 [2022-11-16 16:22:16,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [734683798] [2022-11-16 16:22:16,378 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:22:16,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-16 16:22:16,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:22:16,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-16 16:22:16,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=2021, Unknown=0, NotChecked=0, Total=2256 [2022-11-16 16:22:16,379 INFO L87 Difference]: Start difference. First operand 1372 states and 1589 transitions. Second operand has 32 states, 31 states have (on average 4.419354838709677) internal successors, (137), 31 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:17,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:22:17,163 INFO L93 Difference]: Finished difference Result 1662 states and 1941 transitions. [2022-11-16 16:22:17,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-16 16:22:17,164 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 31 states have (on average 4.419354838709677) internal successors, (137), 31 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2022-11-16 16:22:17,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:22:17,168 INFO L225 Difference]: With dead ends: 1662 [2022-11-16 16:22:17,168 INFO L226 Difference]: Without dead ends: 1662 [2022-11-16 16:22:17,169 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 210 GetRequests, 148 SyntacticMatches, 6 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1017 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=447, Invalid=2859, Unknown=0, NotChecked=0, Total=3306 [2022-11-16 16:22:17,169 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 412 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 798 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 412 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 809 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 798 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:22:17,170 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [412 Valid, 212 Invalid, 809 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 798 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-16 16:22:17,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1662 states. [2022-11-16 16:22:17,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1662 to 1513. [2022-11-16 16:22:17,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1513 states, 1510 states have (on average 1.1708609271523178) internal successors, (1768), 1512 states have internal predecessors, (1768), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:17,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1513 states to 1513 states and 1768 transitions. [2022-11-16 16:22:17,186 INFO L78 Accepts]: Start accepts. Automaton has 1513 states and 1768 transitions. Word has length 63 [2022-11-16 16:22:17,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:22:17,186 INFO L495 AbstractCegarLoop]: Abstraction has 1513 states and 1768 transitions. [2022-11-16 16:22:17,186 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 31 states have (on average 4.419354838709677) internal successors, (137), 31 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:17,186 INFO L276 IsEmpty]: Start isEmpty. Operand 1513 states and 1768 transitions. [2022-11-16 16:22:17,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-16 16:22:17,187 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:22:17,187 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:22:17,192 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-11-16 16:22:17,389 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable62,46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:17,390 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:22:17,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:22:17,390 INFO L85 PathProgramCache]: Analyzing trace with hash 1379723990, now seen corresponding path program 9 times [2022-11-16 16:22:17,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:22:17,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989245083] [2022-11-16 16:22:17,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:22:17,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:22:17,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:22:19,007 INFO L134 CoverageAnalysis]: Checked inductivity of 160 backedges. 24 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 16:22:19,007 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:22:19,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989245083] [2022-11-16 16:22:19,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989245083] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:22:19,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2066463225] [2022-11-16 16:22:19,007 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:22:19,007 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:19,007 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:22:19,008 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:22:19,011 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-16 16:22:19,318 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:22:19,319 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:22:19,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 443 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-16 16:22:19,324 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:22:19,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:22,670 INFO L321 Elim1Store]: treesize reduction 29, result has 49.1 percent of original size [2022-11-16 16:22:22,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 92 treesize of output 68 [2022-11-16 16:22:22,675 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-11-16 16:22:22,678 INFO L134 CoverageAnalysis]: Checked inductivity of 160 backedges. 12 proven. 123 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:22:22,679 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:22:25,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 90 [2022-11-16 16:22:25,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 78 [2022-11-16 16:22:25,272 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-11-16 16:22:26,271 INFO L134 CoverageAnalysis]: Checked inductivity of 160 backedges. 99 proven. 36 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:22:26,271 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2066463225] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:22:26,271 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [137948179] [2022-11-16 16:22:26,272 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:22:26,272 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:22:26,273 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:22:26,273 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:22:26,273 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:22:26,291 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:22:26,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:22:26,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:26,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:26,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:26,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:22:26,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:26,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:26,505 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:22:26,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:22:26,793 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:22:31,540 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '67109#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:22:31,541 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:22:31,541 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:22:31,541 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 31, 31] total 84 [2022-11-16 16:22:31,541 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [610339951] [2022-11-16 16:22:31,541 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:22:31,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-11-16 16:22:31,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:22:31,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-11-16 16:22:31,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=652, Invalid=9050, Unknown=0, NotChecked=0, Total=9702 [2022-11-16 16:22:31,543 INFO L87 Difference]: Start difference. First operand 1513 states and 1768 transitions. Second operand has 85 states, 85 states have (on average 1.9411764705882353) internal successors, (165), 84 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:39,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:22:39,876 INFO L93 Difference]: Finished difference Result 1815 states and 2109 transitions. [2022-11-16 16:22:39,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 124 states. [2022-11-16 16:22:39,876 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 85 states have (on average 1.9411764705882353) internal successors, (165), 84 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2022-11-16 16:22:39,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:22:39,881 INFO L225 Difference]: With dead ends: 1815 [2022-11-16 16:22:39,881 INFO L226 Difference]: Without dead ends: 1813 [2022-11-16 16:22:39,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 295 GetRequests, 120 SyntacticMatches, 1 SemanticMatches, 174 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8072 ImplicationChecksByTransitivity, 18.1s TimeCoverageRelationStatistics Valid=2046, Invalid=28754, Unknown=0, NotChecked=0, Total=30800 [2022-11-16 16:22:39,883 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 368 mSDsluCounter, 383 mSDsCounter, 0 mSdLazyCounter, 1405 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 1856 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 1405 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 427 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-16 16:22:39,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 396 Invalid, 1856 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 1405 Invalid, 0 Unknown, 427 Unchecked, 1.0s Time] [2022-11-16 16:22:39,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1813 states. [2022-11-16 16:22:39,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1813 to 1564. [2022-11-16 16:22:39,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1564 states, 1561 states have (on average 1.1736066623959) internal successors, (1832), 1563 states have internal predecessors, (1832), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:39,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1564 states to 1564 states and 1832 transitions. [2022-11-16 16:22:39,900 INFO L78 Accepts]: Start accepts. Automaton has 1564 states and 1832 transitions. Word has length 63 [2022-11-16 16:22:39,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:22:39,901 INFO L495 AbstractCegarLoop]: Abstraction has 1564 states and 1832 transitions. [2022-11-16 16:22:39,901 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 85 states have (on average 1.9411764705882353) internal successors, (165), 84 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:39,901 INFO L276 IsEmpty]: Start isEmpty. Operand 1564 states and 1832 transitions. [2022-11-16 16:22:39,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-16 16:22:39,903 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:22:39,903 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 5, 5, 5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:22:39,915 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-11-16 16:22:40,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable63,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:40,109 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:22:40,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:22:40,110 INFO L85 PathProgramCache]: Analyzing trace with hash -1817068072, now seen corresponding path program 17 times [2022-11-16 16:22:40,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:22:40,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [358469556] [2022-11-16 16:22:40,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:22:40,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:22:40,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:22:41,017 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 24 proven. 102 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:22:41,017 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:22:41,017 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [358469556] [2022-11-16 16:22:41,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [358469556] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:22:41,017 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [167794427] [2022-11-16 16:22:41,017 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:22:41,017 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:41,018 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:22:41,018 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:22:41,021 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-11-16 16:22:41,427 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-16 16:22:41,428 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:22:41,431 INFO L263 TraceCheckSpWp]: Trace formula consists of 448 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-16 16:22:41,433 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:22:41,456 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-11-16 16:22:41,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-16 16:22:42,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-16 16:22:43,174 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:22:43,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 36 treesize of output 17 [2022-11-16 16:22:43,180 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 67 proven. 57 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-16 16:22:43,181 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:22:43,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-16 16:22:43,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-16 16:22:44,931 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 62 proven. 62 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-16 16:22:44,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [167794427] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:22:44,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [195778327] [2022-11-16 16:22:44,932 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:22:44,932 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:22:44,932 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:22:44,932 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:22:44,933 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:22:44,962 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:22:44,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:22:44,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:22:45,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:45,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:45,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:22:45,144 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-16 16:22:45,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-11-16 16:22:45,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:45,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:22:45,239 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:22:45,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:22:46,407 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:22:50,698 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '71098#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:22:50,698 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:22:50,699 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:22:50,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 18, 18] total 53 [2022-11-16 16:22:50,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [868599046] [2022-11-16 16:22:50,699 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:22:50,699 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-11-16 16:22:50,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:22:50,700 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-11-16 16:22:50,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=334, Invalid=4496, Unknown=0, NotChecked=0, Total=4830 [2022-11-16 16:22:50,701 INFO L87 Difference]: Start difference. First operand 1564 states and 1832 transitions. Second operand has 54 states, 54 states have (on average 3.037037037037037) internal successors, (164), 53 states have internal predecessors, (164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:58,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:22:58,081 INFO L93 Difference]: Finished difference Result 2274 states and 2635 transitions. [2022-11-16 16:22:58,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 101 states. [2022-11-16 16:22:58,082 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 3.037037037037037) internal successors, (164), 53 states have internal predecessors, (164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 65 [2022-11-16 16:22:58,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:22:58,087 INFO L225 Difference]: With dead ends: 2274 [2022-11-16 16:22:58,087 INFO L226 Difference]: Without dead ends: 2261 [2022-11-16 16:22:58,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 149 SyntacticMatches, 0 SemanticMatches, 142 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6018 ImplicationChecksByTransitivity, 13.1s TimeCoverageRelationStatistics Valid=1829, Invalid=18763, Unknown=0, NotChecked=0, Total=20592 [2022-11-16 16:22:58,090 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 359 mSDsluCounter, 505 mSDsCounter, 0 mSdLazyCounter, 749 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 524 SdHoareTripleChecker+Invalid, 1019 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 749 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 215 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-16 16:22:58,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [359 Valid, 524 Invalid, 1019 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 749 Invalid, 0 Unknown, 215 Unchecked, 0.8s Time] [2022-11-16 16:22:58,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2261 states. [2022-11-16 16:22:58,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2261 to 1705. [2022-11-16 16:22:58,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1705 states, 1702 states have (on average 1.1786133960047003) internal successors, (2006), 1704 states have internal predecessors, (2006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:58,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1705 states to 1705 states and 2006 transitions. [2022-11-16 16:22:58,112 INFO L78 Accepts]: Start accepts. Automaton has 1705 states and 2006 transitions. Word has length 65 [2022-11-16 16:22:58,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:22:58,112 INFO L495 AbstractCegarLoop]: Abstraction has 1705 states and 2006 transitions. [2022-11-16 16:22:58,112 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 3.037037037037037) internal successors, (164), 53 states have internal predecessors, (164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:22:58,113 INFO L276 IsEmpty]: Start isEmpty. Operand 1705 states and 2006 transitions. [2022-11-16 16:22:58,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-11-16 16:22:58,114 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:22:58,114 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:22:58,120 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-11-16 16:22:58,314 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable64 [2022-11-16 16:22:58,315 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:22:58,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:22:58,315 INFO L85 PathProgramCache]: Analyzing trace with hash 2124379881, now seen corresponding path program 18 times [2022-11-16 16:22:58,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:22:58,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [8774719] [2022-11-16 16:22:58,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:22:58,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:22:58,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:22:58,951 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 9 proven. 118 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:22:58,951 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:22:58,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [8774719] [2022-11-16 16:22:58,951 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [8774719] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:22:58,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [934303556] [2022-11-16 16:22:58,952 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:22:58,952 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:22:58,952 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:22:58,953 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:22:58,955 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-11-16 16:22:59,370 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:22:59,370 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:22:59,373 INFO L263 TraceCheckSpWp]: Trace formula consists of 433 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-16 16:22:59,375 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:22:59,823 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 16 proven. 111 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:22:59,823 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:23:00,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:23:00,428 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 16 proven. 111 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-16 16:23:00,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [934303556] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:23:00,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [666231229] [2022-11-16 16:23:00,429 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:23:00,430 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:23:00,430 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:23:00,430 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:23:00,430 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:23:00,455 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:23:00,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:23:00,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:23:00,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:00,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:00,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:00,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:23:00,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:00,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:00,785 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:23:00,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:23:01,297 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:23:05,439 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '75668#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:23:05,440 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:23:05,440 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:23:05,440 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 32 [2022-11-16 16:23:05,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1114491226] [2022-11-16 16:23:05,440 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:23:05,441 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-16 16:23:05,441 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:23:05,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-16 16:23:05,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=2216, Unknown=0, NotChecked=0, Total=2450 [2022-11-16 16:23:05,441 INFO L87 Difference]: Start difference. First operand 1705 states and 2006 transitions. Second operand has 34 states, 33 states have (on average 4.212121212121212) internal successors, (139), 33 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:07,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:23:07,416 INFO L93 Difference]: Finished difference Result 1820 states and 2103 transitions. [2022-11-16 16:23:07,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-16 16:23:07,417 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 4.212121212121212) internal successors, (139), 33 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-11-16 16:23:07,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:23:07,419 INFO L225 Difference]: With dead ends: 1820 [2022-11-16 16:23:07,419 INFO L226 Difference]: Without dead ends: 1820 [2022-11-16 16:23:07,420 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 156 SyntacticMatches, 6 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1447 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=786, Invalid=4470, Unknown=0, NotChecked=0, Total=5256 [2022-11-16 16:23:07,420 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 782 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 1100 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 782 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 1117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 1100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-16 16:23:07,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [782 Valid, 209 Invalid, 1117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 1100 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-16 16:23:07,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1820 states. [2022-11-16 16:23:07,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1820 to 1705. [2022-11-16 16:23:07,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1705 states, 1702 states have (on average 1.1750881316098707) internal successors, (2000), 1704 states have internal predecessors, (2000), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:07,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1705 states to 1705 states and 2000 transitions. [2022-11-16 16:23:07,435 INFO L78 Accepts]: Start accepts. Automaton has 1705 states and 2000 transitions. Word has length 66 [2022-11-16 16:23:07,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:23:07,436 INFO L495 AbstractCegarLoop]: Abstraction has 1705 states and 2000 transitions. [2022-11-16 16:23:07,436 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 4.212121212121212) internal successors, (139), 33 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:07,436 INFO L276 IsEmpty]: Start isEmpty. Operand 1705 states and 2000 transitions. [2022-11-16 16:23:07,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-16 16:23:07,438 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:23:07,438 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1] [2022-11-16 16:23:07,449 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Forceful destruction successful, exit code 0 [2022-11-16 16:23:07,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable65 [2022-11-16 16:23:07,645 INFO L420 AbstractCegarLoop]: === Iteration 67 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:23:07,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:23:07,645 INFO L85 PathProgramCache]: Analyzing trace with hash -2034359698, now seen corresponding path program 19 times [2022-11-16 16:23:07,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:23:07,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [897217593] [2022-11-16 16:23:07,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:23:07,645 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:23:07,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:23:09,625 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 24 proven. 113 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-16 16:23:09,625 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:23:09,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [897217593] [2022-11-16 16:23:09,625 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [897217593] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:23:09,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1602057583] [2022-11-16 16:23:09,625 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:23:09,625 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:23:09,626 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:23:09,626 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:23:09,628 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-11-16 16:23:09,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:23:09,868 INFO L263 TraceCheckSpWp]: Trace formula consists of 445 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-16 16:23:09,871 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:23:10,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:10,409 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-16 16:23:10,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-16 16:23:10,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-16 16:23:12,283 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:23:12,283 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:23:12,329 INFO L321 Elim1Store]: treesize reduction 21, result has 66.1 percent of original size [2022-11-16 16:23:12,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 59 treesize of output 65 [2022-11-16 16:23:12,352 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 24 proven. 104 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:23:12,352 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:23:13,007 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:23:13,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 36 [2022-11-16 16:23:13,020 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:23:13,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 62 treesize of output 61 [2022-11-16 16:23:13,034 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:23:13,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 41 [2022-11-16 16:23:13,690 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 24 proven. 104 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:23:13,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1602057583] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:23:13,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1670021649] [2022-11-16 16:23:13,691 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:23:13,691 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:23:13,692 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:23:13,692 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:23:13,692 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:23:13,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:23:13,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:23:13,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:23:13,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:13,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:13,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:13,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:23:13,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:13,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:14,025 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:23:14,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:23:14,519 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:23:21,114 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '79710#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:23:21,114 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:23:21,115 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:23:21,115 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 23, 23] total 58 [2022-11-16 16:23:21,115 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [346198317] [2022-11-16 16:23:21,115 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:23:21,115 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-11-16 16:23:21,115 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:23:21,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-11-16 16:23:21,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=267, Invalid=5282, Unknown=1, NotChecked=0, Total=5550 [2022-11-16 16:23:21,116 INFO L87 Difference]: Start difference. First operand 1705 states and 2000 transitions. Second operand has 59 states, 59 states have (on average 2.389830508474576) internal successors, (141), 58 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:27,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:23:27,406 INFO L93 Difference]: Finished difference Result 1867 states and 2166 transitions. [2022-11-16 16:23:27,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-16 16:23:27,406 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 2.389830508474576) internal successors, (141), 58 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2022-11-16 16:23:27,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:23:27,409 INFO L225 Difference]: With dead ends: 1867 [2022-11-16 16:23:27,409 INFO L226 Difference]: Without dead ends: 1769 [2022-11-16 16:23:27,409 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 261 GetRequests, 151 SyntacticMatches, 1 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2644 ImplicationChecksByTransitivity, 15.6s TimeCoverageRelationStatistics Valid=743, Invalid=11466, Unknown=1, NotChecked=0, Total=12210 [2022-11-16 16:23:27,413 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 189 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 885 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 1761 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 885 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 863 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-16 16:23:27,413 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 447 Invalid, 1761 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 885 Invalid, 0 Unknown, 863 Unchecked, 0.8s Time] [2022-11-16 16:23:27,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1769 states. [2022-11-16 16:23:27,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1769 to 1742. [2022-11-16 16:23:27,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1742 states, 1739 states have (on average 1.1736630247268545) internal successors, (2041), 1741 states have internal predecessors, (2041), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:27,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1742 states to 1742 states and 2041 transitions. [2022-11-16 16:23:27,429 INFO L78 Accepts]: Start accepts. Automaton has 1742 states and 2041 transitions. Word has length 67 [2022-11-16 16:23:27,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:23:27,429 INFO L495 AbstractCegarLoop]: Abstraction has 1742 states and 2041 transitions. [2022-11-16 16:23:27,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 2.389830508474576) internal successors, (141), 58 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:27,429 INFO L276 IsEmpty]: Start isEmpty. Operand 1742 states and 2041 transitions. [2022-11-16 16:23:27,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-16 16:23:27,431 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:23:27,431 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1] [2022-11-16 16:23:27,440 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-11-16 16:23:27,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable66 [2022-11-16 16:23:27,634 INFO L420 AbstractCegarLoop]: === Iteration 68 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:23:27,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:23:27,634 INFO L85 PathProgramCache]: Analyzing trace with hash -120666298, now seen corresponding path program 20 times [2022-11-16 16:23:27,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:23:27,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489210850] [2022-11-16 16:23:27,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:23:27,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:23:27,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:23:29,974 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 24 proven. 113 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-16 16:23:29,974 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:23:29,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489210850] [2022-11-16 16:23:29,975 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489210850] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:23:29,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1580753259] [2022-11-16 16:23:29,975 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:23:29,975 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:23:29,975 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:23:29,977 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:23:29,979 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-11-16 16:23:30,292 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-16 16:23:30,293 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:23:30,296 INFO L263 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 99 conjunts are in the unsatisfiable core [2022-11-16 16:23:30,299 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:23:30,319 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-16 16:23:30,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-16 16:23:30,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:23:31,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 15 [2022-11-16 16:23:31,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 27 [2022-11-16 16:23:33,724 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:23:33,808 INFO L321 Elim1Store]: treesize reduction 32, result has 72.2 percent of original size [2022-11-16 16:23:33,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 69 treesize of output 110 [2022-11-16 16:23:34,226 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 7 proven. 121 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:23:34,226 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:23:36,555 INFO L321 Elim1Store]: treesize reduction 14, result has 48.1 percent of original size [2022-11-16 16:23:36,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 450 treesize of output 413 [2022-11-16 16:23:38,451 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 0 proven. 128 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:23:38,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1580753259] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:23:38,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1077301578] [2022-11-16 16:23:38,452 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:23:38,452 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:23:38,452 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:23:38,453 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:23:38,453 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:23:38,475 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:23:38,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:23:38,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:38,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:38,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:38,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:23:38,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:38,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:23:38,693 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:23:38,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:23:39,817 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:23:44,624 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '83874#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:23:44,624 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:23:44,624 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:23:44,624 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 22, 22] total 68 [2022-11-16 16:23:44,624 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213470475] [2022-11-16 16:23:44,624 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:23:44,625 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-11-16 16:23:44,625 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:23:44,625 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-11-16 16:23:44,625 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=402, Invalid=6738, Unknown=0, NotChecked=0, Total=7140 [2022-11-16 16:23:44,626 INFO L87 Difference]: Start difference. First operand 1742 states and 2041 transitions. Second operand has 69 states, 69 states have (on average 2.6231884057971016) internal successors, (181), 68 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:58,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:23:58,163 INFO L93 Difference]: Finished difference Result 2153 states and 2484 transitions. [2022-11-16 16:23:58,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 109 states. [2022-11-16 16:23:58,163 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 69 states have (on average 2.6231884057971016) internal successors, (181), 68 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2022-11-16 16:23:58,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:23:58,165 INFO L225 Difference]: With dead ends: 2153 [2022-11-16 16:23:58,165 INFO L226 Difference]: Without dead ends: 2139 [2022-11-16 16:23:58,167 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 332 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 171 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8084 ImplicationChecksByTransitivity, 23.5s TimeCoverageRelationStatistics Valid=1712, Invalid=28044, Unknown=0, NotChecked=0, Total=29756 [2022-11-16 16:23:58,167 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 192 mSDsluCounter, 555 mSDsCounter, 0 mSdLazyCounter, 646 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 570 SdHoareTripleChecker+Invalid, 1267 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 646 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 605 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:23:58,167 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 570 Invalid, 1267 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 646 Invalid, 0 Unknown, 605 Unchecked, 0.7s Time] [2022-11-16 16:23:58,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2139 states. [2022-11-16 16:23:58,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2139 to 1918. [2022-11-16 16:23:58,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1918 states, 1915 states have (on average 1.1665796344647519) internal successors, (2234), 1917 states have internal predecessors, (2234), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:58,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1918 states to 1918 states and 2234 transitions. [2022-11-16 16:23:58,184 INFO L78 Accepts]: Start accepts. Automaton has 1918 states and 2234 transitions. Word has length 67 [2022-11-16 16:23:58,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:23:58,184 INFO L495 AbstractCegarLoop]: Abstraction has 1918 states and 2234 transitions. [2022-11-16 16:23:58,184 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 69 states have (on average 2.6231884057971016) internal successors, (181), 68 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:23:58,185 INFO L276 IsEmpty]: Start isEmpty. Operand 1918 states and 2234 transitions. [2022-11-16 16:23:58,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-16 16:23:58,187 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:23:58,187 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:23:58,194 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Ended with exit code 0 [2022-11-16 16:23:58,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable67 [2022-11-16 16:23:58,394 INFO L420 AbstractCegarLoop]: === Iteration 69 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:23:58,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:23:58,394 INFO L85 PathProgramCache]: Analyzing trace with hash -2005442386, now seen corresponding path program 10 times [2022-11-16 16:23:58,394 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:23:58,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1131358947] [2022-11-16 16:23:58,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:23:58,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:23:58,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:23:58,997 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 16 proven. 119 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-11-16 16:23:58,997 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:23:58,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1131358947] [2022-11-16 16:23:58,997 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1131358947] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:23:58,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [488650905] [2022-11-16 16:23:58,997 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:23:58,997 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:23:58,997 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:23:58,999 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:23:59,019 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-11-16 16:23:59,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:23:59,288 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-16 16:23:59,290 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:23:59,729 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 25 proven. 110 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-11-16 16:23:59,729 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:24:00,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:24:00,373 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 25 proven. 110 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-11-16 16:24:00,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [488650905] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:24:00,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [273898550] [2022-11-16 16:24:00,375 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:24:00,375 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:24:00,375 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:24:00,375 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:24:00,375 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:24:00,404 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:24:00,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:24:00,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:00,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:00,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:00,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:24:00,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:00,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:00,618 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:24:00,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:24:00,909 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:24:03,891 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '88593#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:24:03,891 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:24:03,891 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:24:03,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 17] total 37 [2022-11-16 16:24:03,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367217779] [2022-11-16 16:24:03,892 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:24:03,892 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-11-16 16:24:03,892 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:24:03,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-11-16 16:24:03,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=255, Invalid=2501, Unknown=0, NotChecked=0, Total=2756 [2022-11-16 16:24:03,893 INFO L87 Difference]: Start difference. First operand 1918 states and 2234 transitions. Second operand has 39 states, 38 states have (on average 3.1315789473684212) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:05,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:24:05,302 INFO L93 Difference]: Finished difference Result 3205 states and 3746 transitions. [2022-11-16 16:24:05,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-16 16:24:05,303 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 3.1315789473684212) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2022-11-16 16:24:05,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:24:05,307 INFO L225 Difference]: With dead ends: 3205 [2022-11-16 16:24:05,307 INFO L226 Difference]: Without dead ends: 3205 [2022-11-16 16:24:05,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 236 GetRequests, 157 SyntacticMatches, 7 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1502 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=830, Invalid=4572, Unknown=0, NotChecked=0, Total=5402 [2022-11-16 16:24:05,307 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 572 mSDsluCounter, 245 mSDsCounter, 0 mSdLazyCounter, 1181 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 572 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 1186 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 1181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 16:24:05,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [572 Valid, 278 Invalid, 1186 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 1181 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 16:24:05,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3205 states. [2022-11-16 16:24:05,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3205 to 1921. [2022-11-16 16:24:05,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1921 states, 1918 states have (on average 1.1663190823774765) internal successors, (2237), 1920 states have internal predecessors, (2237), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:05,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1921 states to 1921 states and 2237 transitions. [2022-11-16 16:24:05,332 INFO L78 Accepts]: Start accepts. Automaton has 1921 states and 2237 transitions. Word has length 67 [2022-11-16 16:24:05,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:24:05,332 INFO L495 AbstractCegarLoop]: Abstraction has 1921 states and 2237 transitions. [2022-11-16 16:24:05,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 3.1315789473684212) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:05,333 INFO L276 IsEmpty]: Start isEmpty. Operand 1921 states and 2237 transitions. [2022-11-16 16:24:05,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-16 16:24:05,334 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:24:05,335 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1] [2022-11-16 16:24:05,343 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-11-16 16:24:05,540 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable68,52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:24:05,540 INFO L420 AbstractCegarLoop]: === Iteration 70 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:24:05,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:24:05,540 INFO L85 PathProgramCache]: Analyzing trace with hash 1977350616, now seen corresponding path program 21 times [2022-11-16 16:24:05,541 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:24:05,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1650091012] [2022-11-16 16:24:05,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:24:05,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:24:05,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:24:06,327 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 24 proven. 104 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-16 16:24:06,327 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:24:06,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1650091012] [2022-11-16 16:24:06,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1650091012] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:24:06,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1555164449] [2022-11-16 16:24:06,328 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:24:06,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:24:06,328 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:24:06,329 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:24:06,331 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-11-16 16:24:06,646 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:24:06,646 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:24:06,649 INFO L263 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 82 conjunts are in the unsatisfiable core [2022-11-16 16:24:06,651 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:24:07,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:07,381 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:24:07,390 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-16 16:24:07,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 22 [2022-11-16 16:24:08,026 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-16 16:24:08,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-16 16:24:08,035 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 24 proven. 120 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-16 16:24:08,035 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:24:08,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-11-16 16:24:08,788 INFO L134 CoverageAnalysis]: Checked inductivity of 149 backedges. 24 proven. 111 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:24:08,788 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1555164449] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:24:08,788 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1618122928] [2022-11-16 16:24:08,789 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:24:08,789 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:24:08,790 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:24:08,790 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:24:08,790 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:24:08,809 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:24:08,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:24:08,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:08,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:08,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:08,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:08,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:09,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:09,045 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:24:09,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:24:10,221 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:24:14,188 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '94236#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:24:14,188 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:24:14,189 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:24:14,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 25, 21] total 52 [2022-11-16 16:24:14,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [897316730] [2022-11-16 16:24:14,189 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:24:14,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-16 16:24:14,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:24:14,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-16 16:24:14,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=278, Invalid=4414, Unknown=0, NotChecked=0, Total=4692 [2022-11-16 16:24:14,190 INFO L87 Difference]: Start difference. First operand 1921 states and 2237 transitions. Second operand has 53 states, 53 states have (on average 2.5849056603773586) internal successors, (137), 52 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:18,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:24:18,507 INFO L93 Difference]: Finished difference Result 1894 states and 2196 transitions. [2022-11-16 16:24:18,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-16 16:24:18,507 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 53 states have (on average 2.5849056603773586) internal successors, (137), 52 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-11-16 16:24:18,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:24:18,509 INFO L225 Difference]: With dead ends: 1894 [2022-11-16 16:24:18,509 INFO L226 Difference]: Without dead ends: 1347 [2022-11-16 16:24:18,510 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 155 SyntacticMatches, 2 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2719 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=922, Invalid=11510, Unknown=0, NotChecked=0, Total=12432 [2022-11-16 16:24:18,510 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 424 mSDsluCounter, 703 mSDsCounter, 0 mSdLazyCounter, 2653 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 424 SdHoareTripleChecker+Valid, 728 SdHoareTripleChecker+Invalid, 2864 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 2653 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 196 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:24:18,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [424 Valid, 728 Invalid, 2864 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 2653 Invalid, 0 Unknown, 196 Unchecked, 1.5s Time] [2022-11-16 16:24:18,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1347 states. [2022-11-16 16:24:18,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1347 to 1347. [2022-11-16 16:24:18,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1347 states, 1344 states have (on average 1.1941964285714286) internal successors, (1605), 1346 states have internal predecessors, (1605), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:18,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1347 states to 1347 states and 1605 transitions. [2022-11-16 16:24:18,519 INFO L78 Accepts]: Start accepts. Automaton has 1347 states and 1605 transitions. Word has length 69 [2022-11-16 16:24:18,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:24:18,519 INFO L495 AbstractCegarLoop]: Abstraction has 1347 states and 1605 transitions. [2022-11-16 16:24:18,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 53 states have (on average 2.5849056603773586) internal successors, (137), 52 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:18,519 INFO L276 IsEmpty]: Start isEmpty. Operand 1347 states and 1605 transitions. [2022-11-16 16:24:18,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-16 16:24:18,520 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:24:18,520 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 5, 5, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1] [2022-11-16 16:24:18,526 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Forceful destruction successful, exit code 0 [2022-11-16 16:24:18,720 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable69 [2022-11-16 16:24:18,721 INFO L420 AbstractCegarLoop]: === Iteration 71 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:24:18,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:24:18,721 INFO L85 PathProgramCache]: Analyzing trace with hash -181150964, now seen corresponding path program 22 times [2022-11-16 16:24:18,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:24:18,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2093654720] [2022-11-16 16:24:18,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:24:18,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:24:18,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:24:19,221 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 9 proven. 128 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:24:19,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:24:19,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2093654720] [2022-11-16 16:24:19,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2093654720] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:24:19,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [618529013] [2022-11-16 16:24:19,222 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:24:19,222 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:24:19,222 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:24:19,223 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:24:19,225 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Waiting until timeout for monitored process [2022-11-16 16:24:19,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:24:19,472 INFO L263 TraceCheckSpWp]: Trace formula consists of 458 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-16 16:24:19,473 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:24:19,839 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 16 proven. 121 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:24:19,839 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:24:20,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-16 16:24:20,377 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 16 proven. 121 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 16:24:20,378 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [618529013] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:24:20,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1560039043] [2022-11-16 16:24:20,379 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:24:20,379 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:24:20,379 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:24:20,379 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:24:20,379 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:24:20,396 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:24:20,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:24:20,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:24:20,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:20,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:20,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:20,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:24:20,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:20,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:20,694 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:24:20,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:24:21,188 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:24:27,363 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '98021#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:24:27,364 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:24:27,364 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:24:27,364 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 32 [2022-11-16 16:24:27,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [14481668] [2022-11-16 16:24:27,364 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:24:27,364 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-16 16:24:27,364 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:24:27,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-16 16:24:27,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=231, Invalid=2219, Unknown=0, NotChecked=0, Total=2450 [2022-11-16 16:24:27,365 INFO L87 Difference]: Start difference. First operand 1347 states and 1605 transitions. Second operand has 34 states, 33 states have (on average 4.03030303030303) internal successors, (133), 33 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:29,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:24:29,552 INFO L93 Difference]: Finished difference Result 1495 states and 1741 transitions. [2022-11-16 16:24:29,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-16 16:24:29,553 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 4.03030303030303) internal successors, (133), 33 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-11-16 16:24:29,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:24:29,555 INFO L225 Difference]: With dead ends: 1495 [2022-11-16 16:24:29,555 INFO L226 Difference]: Without dead ends: 1495 [2022-11-16 16:24:29,556 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 165 SyntacticMatches, 6 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1534 ImplicationChecksByTransitivity, 8.1s TimeCoverageRelationStatistics Valid=846, Invalid=4704, Unknown=0, NotChecked=0, Total=5550 [2022-11-16 16:24:29,556 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 1133 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 928 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1133 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 955 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 928 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-16 16:24:29,557 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1133 Valid, 152 Invalid, 955 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 928 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-16 16:24:29,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1495 states. [2022-11-16 16:24:29,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1495 to 1266. [2022-11-16 16:24:29,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1266 states, 1263 states have (on average 1.196357878068092) internal successors, (1511), 1265 states have internal predecessors, (1511), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:29,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1266 states to 1266 states and 1511 transitions. [2022-11-16 16:24:29,577 INFO L78 Accepts]: Start accepts. Automaton has 1266 states and 1511 transitions. Word has length 69 [2022-11-16 16:24:29,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:24:29,577 INFO L495 AbstractCegarLoop]: Abstraction has 1266 states and 1511 transitions. [2022-11-16 16:24:29,578 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 4.03030303030303) internal successors, (133), 33 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:29,578 INFO L276 IsEmpty]: Start isEmpty. Operand 1266 states and 1511 transitions. [2022-11-16 16:24:29,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-16 16:24:29,580 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:24:29,580 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 5, 5, 5, 5, 4, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:24:29,588 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Ended with exit code 0 [2022-11-16 16:24:29,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable70 [2022-11-16 16:24:29,787 INFO L420 AbstractCegarLoop]: === Iteration 72 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:24:29,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:24:29,788 INFO L85 PathProgramCache]: Analyzing trace with hash -411247676, now seen corresponding path program 23 times [2022-11-16 16:24:29,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:24:29,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1418199905] [2022-11-16 16:24:29,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:24:29,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:24:29,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:24:31,374 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 24 proven. 108 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-11-16 16:24:31,375 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:24:31,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1418199905] [2022-11-16 16:24:31,375 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1418199905] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:24:31,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [313221414] [2022-11-16 16:24:31,375 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:24:31,375 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:24:31,375 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:24:31,376 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:24:31,379 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Waiting until timeout for monitored process [2022-11-16 16:24:31,898 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-16 16:24:31,898 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:24:31,902 INFO L263 TraceCheckSpWp]: Trace formula consists of 440 conjuncts, 63 conjunts are in the unsatisfiable core [2022-11-16 16:24:31,906 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:24:31,931 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-11-16 16:24:31,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-11-16 16:24:31,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:24:32,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-11-16 16:24:32,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 23 [2022-11-16 16:24:33,649 INFO L321 Elim1Store]: treesize reduction 3, result has 93.9 percent of original size [2022-11-16 16:24:33,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 52 treesize of output 66 [2022-11-16 16:24:33,946 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 9 proven. 72 refuted. 0 times theorem prover too weak. 76 trivial. 0 not checked. [2022-11-16 16:24:33,946 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:24:44,302 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:24:44,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-11-16 16:24:44,331 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:24:44,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 120 [2022-11-16 16:24:44,349 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:24:44,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-11-16 16:24:45,109 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 5 proven. 79 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2022-11-16 16:24:45,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [313221414] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:24:45,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1432299550] [2022-11-16 16:24:45,110 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:24:45,110 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:24:45,111 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:24:45,111 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:24:45,111 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:24:45,133 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:24:45,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:24:45,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:45,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:45,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:45,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:45,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:45,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:45,401 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:24:45,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:24:46,629 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:24:50,781 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '101303#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:24:50,782 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:24:50,782 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:24:50,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 10, 11] total 46 [2022-11-16 16:24:50,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1782417648] [2022-11-16 16:24:50,782 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:24:50,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-16 16:24:50,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:24:50,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-16 16:24:50,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=3657, Unknown=15, NotChecked=0, Total=3906 [2022-11-16 16:24:50,784 INFO L87 Difference]: Start difference. First operand 1266 states and 1511 transitions. Second operand has 47 states, 47 states have (on average 2.765957446808511) internal successors, (130), 46 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:56,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:24:56,143 INFO L93 Difference]: Finished difference Result 1992 states and 2324 transitions. [2022-11-16 16:24:56,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-11-16 16:24:56,143 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.765957446808511) internal successors, (130), 46 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-11-16 16:24:56,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:24:56,146 INFO L225 Difference]: With dead ends: 1992 [2022-11-16 16:24:56,146 INFO L226 Difference]: Without dead ends: 1992 [2022-11-16 16:24:56,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 167 SyntacticMatches, 2 SemanticMatches, 120 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3475 ImplicationChecksByTransitivity, 20.5s TimeCoverageRelationStatistics Valid=884, Invalid=13862, Unknown=16, NotChecked=0, Total=14762 [2022-11-16 16:24:56,148 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 37 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 385 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 538 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 385 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 138 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 16:24:56,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 42 Invalid, 538 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 385 Invalid, 0 Unknown, 138 Unchecked, 0.4s Time] [2022-11-16 16:24:56,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1992 states. [2022-11-16 16:24:56,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1992 to 1711. [2022-11-16 16:24:56,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1711 states, 1708 states have (on average 1.180327868852459) internal successors, (2016), 1710 states have internal predecessors, (2016), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:56,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1711 states to 1711 states and 2016 transitions. [2022-11-16 16:24:56,168 INFO L78 Accepts]: Start accepts. Automaton has 1711 states and 2016 transitions. Word has length 69 [2022-11-16 16:24:56,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:24:56,168 INFO L495 AbstractCegarLoop]: Abstraction has 1711 states and 2016 transitions. [2022-11-16 16:24:56,168 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.765957446808511) internal successors, (130), 46 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:24:56,169 INFO L276 IsEmpty]: Start isEmpty. Operand 1711 states and 2016 transitions. [2022-11-16 16:24:56,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-16 16:24:56,170 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:24:56,170 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:24:56,179 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Forceful destruction successful, exit code 0 [2022-11-16 16:24:56,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable71,55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:24:56,377 INFO L420 AbstractCegarLoop]: === Iteration 73 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:24:56,377 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:24:56,377 INFO L85 PathProgramCache]: Analyzing trace with hash 1210221536, now seen corresponding path program 9 times [2022-11-16 16:24:56,377 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:24:56,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1446022489] [2022-11-16 16:24:56,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:24:56,378 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:24:56,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:24:57,177 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 25 proven. 136 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-16 16:24:57,178 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:24:57,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1446022489] [2022-11-16 16:24:57,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1446022489] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:24:57,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2022844944] [2022-11-16 16:24:57,178 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:24:57,178 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:24:57,178 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:24:57,183 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:24:57,208 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Waiting until timeout for monitored process [2022-11-16 16:24:57,643 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:24:57,643 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:24:57,648 INFO L263 TraceCheckSpWp]: Trace formula consists of 485 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-16 16:24:57,649 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:24:57,665 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-16 16:24:57,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-11-16 16:24:58,089 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 36 proven. 125 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-16 16:24:58,089 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:24:58,983 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 36 proven. 125 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-11-16 16:24:58,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2022844944] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:24:58,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [249259016] [2022-11-16 16:24:58,985 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-11-16 16:24:58,986 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:24:58,986 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:24:58,986 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:24:58,986 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:24:59,007 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:24:59,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:24:59,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:59,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:59,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:59,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:24:59,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:59,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:24:59,249 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:24:59,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:24:59,508 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:25:03,098 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '105597#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:25:03,098 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:25:03,099 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:25:03,099 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 48 [2022-11-16 16:25:03,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1484569061] [2022-11-16 16:25:03,099 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:25:03,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-16 16:25:03,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:25:03,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-16 16:25:03,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=396, Invalid=3510, Unknown=0, NotChecked=0, Total=3906 [2022-11-16 16:25:03,101 INFO L87 Difference]: Start difference. First operand 1711 states and 2016 transitions. Second operand has 49 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 49 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:25:06,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:25:06,384 INFO L93 Difference]: Finished difference Result 2513 states and 2945 transitions. [2022-11-16 16:25:06,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-16 16:25:06,384 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 49 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-11-16 16:25:06,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:25:06,388 INFO L225 Difference]: With dead ends: 2513 [2022-11-16 16:25:06,388 INFO L226 Difference]: Without dead ends: 2513 [2022-11-16 16:25:06,388 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 162 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1842 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=955, Invalid=5365, Unknown=0, NotChecked=0, Total=6320 [2022-11-16 16:25:06,389 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 938 mSDsluCounter, 627 mSDsCounter, 0 mSdLazyCounter, 2594 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 938 SdHoareTripleChecker+Valid, 682 SdHoareTripleChecker+Invalid, 2608 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 2594 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-16 16:25:06,389 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [938 Valid, 682 Invalid, 2608 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 2594 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-16 16:25:06,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2513 states. [2022-11-16 16:25:06,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2513 to 2261. [2022-11-16 16:25:06,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2261 states, 2258 states have (on average 1.1944198405668733) internal successors, (2697), 2260 states have internal predecessors, (2697), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:25:06,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2261 states to 2261 states and 2697 transitions. [2022-11-16 16:25:06,414 INFO L78 Accepts]: Start accepts. Automaton has 2261 states and 2697 transitions. Word has length 69 [2022-11-16 16:25:06,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:25:06,414 INFO L495 AbstractCegarLoop]: Abstraction has 2261 states and 2697 transitions. [2022-11-16 16:25:06,414 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 49 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:25:06,414 INFO L276 IsEmpty]: Start isEmpty. Operand 2261 states and 2697 transitions. [2022-11-16 16:25:06,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-11-16 16:25:06,416 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:25:06,416 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 6, 5, 5, 5, 5, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:25:06,423 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Forceful destruction successful, exit code 0 [2022-11-16 16:25:06,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable72,56 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:25:06,617 INFO L420 AbstractCegarLoop]: === Iteration 74 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:25:06,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:25:06,617 INFO L85 PathProgramCache]: Analyzing trace with hash 1368276519, now seen corresponding path program 24 times [2022-11-16 16:25:06,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:25:06,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540799678] [2022-11-16 16:25:06,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:25:06,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:25:06,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:25:07,671 INFO L134 CoverageAnalysis]: Checked inductivity of 185 backedges. 28 proven. 127 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-16 16:25:07,671 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:25:07,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540799678] [2022-11-16 16:25:07,671 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540799678] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:25:07,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1340957104] [2022-11-16 16:25:07,672 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-16 16:25:07,672 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:25:07,672 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:25:07,675 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:25:07,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Waiting until timeout for monitored process [2022-11-16 16:25:08,149 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-16 16:25:08,150 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:25:08,154 INFO L263 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-16 16:25:08,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:25:08,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:25:33,434 INFO L321 Elim1Store]: treesize reduction 29, result has 29.3 percent of original size [2022-11-16 16:25:33,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 72 treesize of output 44 [2022-11-16 16:25:33,440 INFO L134 CoverageAnalysis]: Checked inductivity of 185 backedges. 18 proven. 120 refuted. 20 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-16 16:25:33,440 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:25:42,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 76 treesize of output 66 [2022-11-16 16:25:42,445 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:25:42,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 76 treesize of output 56 [2022-11-16 16:25:43,628 INFO L134 CoverageAnalysis]: Checked inductivity of 185 backedges. 64 proven. 89 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-16 16:25:43,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1340957104] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:25:43,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [304845835] [2022-11-16 16:25:43,629 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:25:43,629 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:25:43,629 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:25:43,630 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:25:43,630 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:25:43,663 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:25:43,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:25:43,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:25:43,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:25:43,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:25:43,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:25:43,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:25:43,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:25:43,925 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:25:43,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:25:45,301 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:25:50,942 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '110902#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:25:50,942 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:25:50,942 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:25:50,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 27, 26] total 69 [2022-11-16 16:25:50,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2076260236] [2022-11-16 16:25:50,942 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:25:50,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-11-16 16:25:50,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:25:50,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-11-16 16:25:50,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=416, Invalid=6697, Unknown=27, NotChecked=0, Total=7140 [2022-11-16 16:25:50,944 INFO L87 Difference]: Start difference. First operand 2261 states and 2697 transitions. Second operand has 69 states, 69 states have (on average 2.4347826086956523) internal successors, (168), 69 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:26:44,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:26:44,356 INFO L93 Difference]: Finished difference Result 4160 states and 4864 transitions. [2022-11-16 16:26:44,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 183 states. [2022-11-16 16:26:44,356 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 69 states have (on average 2.4347826086956523) internal successors, (168), 69 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-11-16 16:26:44,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:26:44,364 INFO L225 Difference]: With dead ends: 4160 [2022-11-16 16:26:44,364 INFO L226 Difference]: Without dead ends: 4140 [2022-11-16 16:26:44,369 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 426 GetRequests, 171 SyntacticMatches, 6 SemanticMatches, 249 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20522 ImplicationChecksByTransitivity, 89.0s TimeCoverageRelationStatistics Valid=3651, Invalid=59058, Unknown=41, NotChecked=0, Total=62750 [2022-11-16 16:26:44,369 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 1060 mSDsluCounter, 1353 mSDsCounter, 0 mSdLazyCounter, 4519 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1060 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 5815 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 4519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1249 IncrementalHoareTripleChecker+Unchecked, 4.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:26:44,370 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1060 Valid, 1395 Invalid, 5815 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 4519 Invalid, 0 Unknown, 1249 Unchecked, 4.1s Time] [2022-11-16 16:26:44,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4140 states. [2022-11-16 16:26:44,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4140 to 2250. [2022-11-16 16:26:44,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2250 states, 2247 states have (on average 1.187805963506898) internal successors, (2669), 2249 states have internal predecessors, (2669), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:26:44,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2250 states to 2250 states and 2669 transitions. [2022-11-16 16:26:44,415 INFO L78 Accepts]: Start accepts. Automaton has 2250 states and 2669 transitions. Word has length 70 [2022-11-16 16:26:44,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:26:44,416 INFO L495 AbstractCegarLoop]: Abstraction has 2250 states and 2669 transitions. [2022-11-16 16:26:44,416 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 69 states have (on average 2.4347826086956523) internal successors, (168), 69 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:26:44,416 INFO L276 IsEmpty]: Start isEmpty. Operand 2250 states and 2669 transitions. [2022-11-16 16:26:44,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-11-16 16:26:44,418 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:26:44,418 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:26:44,426 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Ended with exit code 0 [2022-11-16 16:26:44,626 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable73,57 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:26:44,627 INFO L420 AbstractCegarLoop]: === Iteration 75 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:26:44,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:26:44,627 INFO L85 PathProgramCache]: Analyzing trace with hash 2029437960, now seen corresponding path program 10 times [2022-11-16 16:26:44,627 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:26:44,627 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1780152032] [2022-11-16 16:26:44,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:26:44,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:26:44,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:26:45,926 INFO L134 CoverageAnalysis]: Checked inductivity of 167 backedges. 41 proven. 125 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:26:45,927 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:26:45,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1780152032] [2022-11-16 16:26:45,927 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1780152032] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:26:45,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1031282944] [2022-11-16 16:26:45,927 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:26:45,927 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:26:45,927 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:26:45,928 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:26:45,936 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Waiting until timeout for monitored process [2022-11-16 16:26:46,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:26:46,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 457 conjuncts, 98 conjunts are in the unsatisfiable core [2022-11-16 16:26:46,326 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:26:46,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:26:46,928 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-16 16:26:46,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-16 16:26:46,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-16 16:26:48,782 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:26:48,783 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-16 16:26:48,797 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-11-16 16:26:48,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 29 treesize of output 18 [2022-11-16 16:26:48,864 INFO L134 CoverageAnalysis]: Checked inductivity of 167 backedges. 41 proven. 125 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:26:48,864 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:26:49,419 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:26:49,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 36 [2022-11-16 16:26:49,434 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:26:49,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 62 treesize of output 61 [2022-11-16 16:26:49,458 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:26:49,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 41 [2022-11-16 16:26:50,323 INFO L134 CoverageAnalysis]: Checked inductivity of 167 backedges. 41 proven. 125 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:26:50,324 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1031282944] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:26:50,324 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1457415304] [2022-11-16 16:26:50,325 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:26:50,325 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:26:50,325 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:26:50,326 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:26:50,326 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:26:50,353 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:26:50,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:26:50,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:26:50,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:26:50,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:26:50,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:26:50,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:26:50,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:26:50,621 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:26:50,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:26:51,155 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:26:57,239 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '118174#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:26:57,239 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:26:57,239 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:26:57,239 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 22, 21] total 56 [2022-11-16 16:26:57,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [938592377] [2022-11-16 16:26:57,239 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:26:57,240 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-11-16 16:26:57,240 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:26:57,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-11-16 16:26:57,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=288, Invalid=4961, Unknown=7, NotChecked=0, Total=5256 [2022-11-16 16:26:57,240 INFO L87 Difference]: Start difference. First operand 2250 states and 2669 transitions. Second operand has 57 states, 57 states have (on average 2.8421052631578947) internal successors, (162), 56 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:26:58,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:26:58,211 INFO L93 Difference]: Finished difference Result 2513 states and 2946 transitions. [2022-11-16 16:26:58,212 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-16 16:26:58,212 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 2.8421052631578947) internal successors, (162), 56 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-11-16 16:26:58,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:26:58,214 INFO L225 Difference]: With dead ends: 2513 [2022-11-16 16:26:58,214 INFO L226 Difference]: Without dead ends: 2440 [2022-11-16 16:26:58,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 164 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1887 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=364, Invalid=6601, Unknown=7, NotChecked=0, Total=6972 [2022-11-16 16:26:58,215 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 22 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 516 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 796 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 516 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 272 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 16:26:58,215 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 281 Invalid, 796 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 516 Invalid, 0 Unknown, 272 Unchecked, 0.3s Time] [2022-11-16 16:26:58,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2440 states. [2022-11-16 16:26:58,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2440 to 2439. [2022-11-16 16:26:58,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2439 states, 2436 states have (on average 1.1789819376026272) internal successors, (2872), 2438 states have internal predecessors, (2872), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:26:58,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2439 states to 2439 states and 2872 transitions. [2022-11-16 16:26:58,235 INFO L78 Accepts]: Start accepts. Automaton has 2439 states and 2872 transitions. Word has length 72 [2022-11-16 16:26:58,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:26:58,235 INFO L495 AbstractCegarLoop]: Abstraction has 2439 states and 2872 transitions. [2022-11-16 16:26:58,235 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 2.8421052631578947) internal successors, (162), 56 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:26:58,235 INFO L276 IsEmpty]: Start isEmpty. Operand 2439 states and 2872 transitions. [2022-11-16 16:26:58,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-11-16 16:26:58,237 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:26:58,237 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 5, 5, 5, 5, 5, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-16 16:26:58,243 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Forceful destruction successful, exit code 0 [2022-11-16 16:26:58,437 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable74,58 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:26:58,437 INFO L420 AbstractCegarLoop]: === Iteration 76 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:26:58,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:26:58,438 INFO L85 PathProgramCache]: Analyzing trace with hash -1754356117, now seen corresponding path program 25 times [2022-11-16 16:26:58,438 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:26:58,438 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1138373113] [2022-11-16 16:26:58,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:26:58,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:26:58,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:26:59,980 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 28 proven. 133 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-16 16:26:59,981 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:26:59,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1138373113] [2022-11-16 16:26:59,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1138373113] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:26:59,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1785702917] [2022-11-16 16:26:59,981 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-16 16:26:59,981 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:26:59,981 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:26:59,982 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:26:59,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Waiting until timeout for monitored process [2022-11-16 16:27:00,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:27:00,275 INFO L263 TraceCheckSpWp]: Trace formula consists of 496 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-16 16:27:00,279 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:27:00,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:27:00,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:00,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-11-16 16:27:01,303 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-11-16 16:27:01,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-11-16 16:27:01,307 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 28 proven. 133 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-16 16:27:01,308 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:27:01,541 WARN L833 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2751 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_2751) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 5 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-11-16 16:27:01,548 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:27:01,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-11-16 16:27:01,556 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-11-16 16:27:01,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-11-16 16:27:01,918 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 28 proven. 133 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-16 16:27:01,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1785702917] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:27:01,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1138538873] [2022-11-16 16:27:01,920 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:27:01,920 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:27:01,920 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:27:01,920 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:27:01,921 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:27:01,944 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:27:01,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:27:01,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:27:02,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:02,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:02,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:02,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-11-16 16:27:02,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:02,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:02,279 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:27:02,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:27:02,856 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:27:10,117 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '123645#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:27:10,117 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:27:10,117 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:27:10,117 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 21, 21] total 42 [2022-11-16 16:27:10,118 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619874573] [2022-11-16 16:27:10,118 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:27:10,118 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-11-16 16:27:10,118 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:27:10,118 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-11-16 16:27:10,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=3111, Unknown=1, NotChecked=112, Total=3422 [2022-11-16 16:27:10,119 INFO L87 Difference]: Start difference. First operand 2439 states and 2872 transitions. Second operand has 43 states, 43 states have (on average 2.4651162790697674) internal successors, (106), 42 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:27:13,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:27:13,125 INFO L93 Difference]: Finished difference Result 2835 states and 3303 transitions. [2022-11-16 16:27:13,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-16 16:27:13,126 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 2.4651162790697674) internal successors, (106), 42 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-11-16 16:27:13,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:27:13,128 INFO L225 Difference]: With dead ends: 2835 [2022-11-16 16:27:13,128 INFO L226 Difference]: Without dead ends: 2835 [2022-11-16 16:27:13,128 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 184 SyntacticMatches, 5 SemanticMatches, 78 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 1171 ImplicationChecksByTransitivity, 10.4s TimeCoverageRelationStatistics Valid=335, Invalid=5830, Unknown=1, NotChecked=154, Total=6320 [2022-11-16 16:27:13,129 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 87 mSDsluCounter, 497 mSDsCounter, 0 mSdLazyCounter, 1899 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 517 SdHoareTripleChecker+Invalid, 2242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 1899 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 335 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-16 16:27:13,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 517 Invalid, 2242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 1899 Invalid, 0 Unknown, 335 Unchecked, 1.5s Time] [2022-11-16 16:27:13,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2835 states. [2022-11-16 16:27:13,148 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2835 to 2510. [2022-11-16 16:27:13,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2510 states, 2507 states have (on average 1.1775029916234543) internal successors, (2952), 2509 states have internal predecessors, (2952), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:27:13,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2510 states to 2510 states and 2952 transitions. [2022-11-16 16:27:13,153 INFO L78 Accepts]: Start accepts. Automaton has 2510 states and 2952 transitions. Word has length 74 [2022-11-16 16:27:13,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:27:13,153 INFO L495 AbstractCegarLoop]: Abstraction has 2510 states and 2952 transitions. [2022-11-16 16:27:13,153 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 43 states have (on average 2.4651162790697674) internal successors, (106), 42 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:27:13,153 INFO L276 IsEmpty]: Start isEmpty. Operand 2510 states and 2952 transitions. [2022-11-16 16:27:13,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-11-16 16:27:13,155 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:27:13,155 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:27:13,162 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Forceful destruction successful, exit code 0 [2022-11-16 16:27:13,356 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 59 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable75 [2022-11-16 16:27:13,356 INFO L420 AbstractCegarLoop]: === Iteration 77 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:27:13,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:27:13,356 INFO L85 PathProgramCache]: Analyzing trace with hash 1913032450, now seen corresponding path program 11 times [2022-11-16 16:27:13,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:27:13,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710666036] [2022-11-16 16:27:13,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:27:13,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:27:13,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:27:13,903 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 16 proven. 161 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:27:13,903 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:27:13,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710666036] [2022-11-16 16:27:13,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710666036] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:27:13,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1416564995] [2022-11-16 16:27:13,904 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:27:13,904 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:27:13,904 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:27:13,905 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:27:13,907 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Waiting until timeout for monitored process [2022-11-16 16:27:14,406 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-16 16:27:14,406 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:27:14,410 INFO L263 TraceCheckSpWp]: Trace formula consists of 470 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-16 16:27:14,411 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:27:15,082 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 25 proven. 152 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:27:15,082 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 16:27:15,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-16 16:27:15,996 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 25 proven. 152 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 16:27:15,997 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1416564995] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 16:27:15,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [935514698] [2022-11-16 16:27:15,998 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-11-16 16:27:15,998 INFO L166 IcfgInterpreter]: Building call graph [2022-11-16 16:27:15,999 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-16 16:27:15,999 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-16 16:27:15,999 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-16 16:27:16,023 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-16 16:27:16,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-11-16 16:27:16,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:16,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:16,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:16,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-16 16:27:16,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:16,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:16,280 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-11-16 16:27:16,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-11-16 16:27:16,802 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-16 16:27:22,246 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '129531#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-11-16 16:27:22,246 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-16 16:27:22,246 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 16:27:22,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 17, 17] total 42 [2022-11-16 16:27:22,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645588415] [2022-11-16 16:27:22,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 16:27:22,247 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-16 16:27:22,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-16 16:27:22,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-16 16:27:22,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=375, Invalid=3165, Unknown=0, NotChecked=0, Total=3540 [2022-11-16 16:27:22,248 INFO L87 Difference]: Start difference. First operand 2510 states and 2952 transitions. Second operand has 44 states, 43 states have (on average 4.767441860465116) internal successors, (205), 43 states have internal predecessors, (205), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:27:24,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 16:27:24,206 INFO L93 Difference]: Finished difference Result 4352 states and 5147 transitions. [2022-11-16 16:27:24,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-16 16:27:24,207 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 43 states have (on average 4.767441860465116) internal successors, (205), 43 states have internal predecessors, (205), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-11-16 16:27:24,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 16:27:24,211 INFO L225 Difference]: With dead ends: 4352 [2022-11-16 16:27:24,211 INFO L226 Difference]: Without dead ends: 4352 [2022-11-16 16:27:24,212 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 252 GetRequests, 170 SyntacticMatches, 7 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1922 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=900, Invalid=4952, Unknown=0, NotChecked=0, Total=5852 [2022-11-16 16:27:24,212 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 1143 mSDsluCounter, 213 mSDsCounter, 0 mSdLazyCounter, 1248 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1143 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 1297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 1248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-16 16:27:24,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1143 Valid, 235 Invalid, 1297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 1248 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-16 16:27:24,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4352 states. [2022-11-16 16:27:24,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4352 to 3489. [2022-11-16 16:27:24,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3489 states, 3486 states have (on average 1.1775674125071716) internal successors, (4105), 3488 states have internal predecessors, (4105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:27:24,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3489 states to 3489 states and 4105 transitions. [2022-11-16 16:27:24,263 INFO L78 Accepts]: Start accepts. Automaton has 3489 states and 4105 transitions. Word has length 74 [2022-11-16 16:27:24,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 16:27:24,263 INFO L495 AbstractCegarLoop]: Abstraction has 3489 states and 4105 transitions. [2022-11-16 16:27:24,264 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 43 states have (on average 4.767441860465116) internal successors, (205), 43 states have internal predecessors, (205), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 16:27:24,264 INFO L276 IsEmpty]: Start isEmpty. Operand 3489 states and 4105 transitions. [2022-11-16 16:27:24,266 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-11-16 16:27:24,266 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 16:27:24,266 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 6, 6, 6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 16:27:24,273 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Forceful destruction successful, exit code 0 [2022-11-16 16:27:24,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable76,60 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:27:24,467 INFO L420 AbstractCegarLoop]: === Iteration 78 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-11-16 16:27:24,467 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 16:27:24,467 INFO L85 PathProgramCache]: Analyzing trace with hash 362022223, now seen corresponding path program 26 times [2022-11-16 16:27:24,467 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-16 16:27:24,467 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123046739] [2022-11-16 16:27:24,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 16:27:24,468 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 16:27:24,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 16:27:25,059 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 16 proven. 150 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2022-11-16 16:27:25,059 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-16 16:27:25,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123046739] [2022-11-16 16:27:25,059 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123046739] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 16:27:25,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1776207551] [2022-11-16 16:27:25,060 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-16 16:27:25,060 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 16:27:25,060 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 [2022-11-16 16:27:25,062 INFO L229 MonitoredProcess]: Starting monitored process 61 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 16:27:25,063 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0e8ff126-2548-4874-a067-ecd792f371d4/bin/utaipan-Xvt2sAort0/z3 -smt2 -in SMTLIB2_COMPLIANT=true (61)] Waiting until timeout for monitored process [2022-11-16 16:27:25,442 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-16 16:27:25,442 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-16 16:27:25,447 INFO L263 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 88 conjunts are in the unsatisfiable core [2022-11-16 16:27:25,450 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 16:27:25,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-11-16 16:27:25,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-16 16:27:25,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19